The issue is related to a Heap Buffer Overflow that allows remote attackers to execute arbitrary code via a crafted erofs filesystem image. This can be achieved through the `erofs read one data` function at data.c or the `erofsfsck dirent iter` function in fsck/main.c.