CVE-2021-33983: 
NixOS vulnerability analysis and mitigation

Buffer Overflow vulnerability in Dvidelabs flatcc v.0.6.0 allows local attacker to execute arbitrary code via the fltacc execution of the error_ref_sym function. The vulnerability was discovered in the parser.c file where an integer overflow can lead to a stack buffer overflow (MITRE).

The vulnerability exists in the error_ref_sym function within parser.c. The issue occurs when handling the size variable 'k' which represents the remaining buffer space. When k becomes 0, a decrement operation (--k) causes an integer overflow. This overflow leads to an invalid size calculation for subsequent memcpy operations, potentially resulting in a stack buffer overflow (GitHub Issue).

A successful exploitation of this vulnerability could allow a local attacker to execute arbitrary code on the affected system through a specially crafted input that triggers the buffer overflow condition (MITRE).

The vulnerability can be exploited by a local attacker by providing specially crafted input to the flatcc parser. A proof of concept exists demonstrating the vulnerability using a malformed struct definition that triggers the stack buffer overflow (GitHub Issue).

Users should upgrade to a version of flatcc that contains the fix for this vulnerability. No specific workaround has been documented for users who cannot upgrade immediately.