HIGH 7.8 NVD

CVE-2026-91041

Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap write during log replay. The write is attacker-positioned an

Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap write during log replay. The write is attacker-positioned and attacker-valued, and on a common embedded memory layout it reaches the FX_MEDIA driver callback, giving control of the instruction pointer.

References

https://github.com/eclipse-threadx/filex/security/advisories/GHSA-c8cj-fj9j-426v

Published: 2026-10-20 · Source: NVD · Feed updated: 2026-10-20

This high severity vulnerability with a CVSS score of 7.8 was published on 2026-10-20 via NVD.

vulnfeed aggregates 16920 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.