CVE-2026-91041
Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap write during log replay. The write is attacker-positioned and attacker-valued, and on a common embedded memory layout it reaches the FX_MEDIA driver callback, giving control of the instruction pointer.
- Score
- CVSS 3.1 7.8 High
- Status
- Awaiting Analysis - emo@eclipse.org
- Published
- 2026-10-20
- Last modified
- 2026-10-20
- Weaknesses
- CWE-1284, CWE-787
Affected products
References
- https://github.com/eclipse-threadx/filex/security/advisories/GHSA-c8cj-fj9j-426v
