TI-2026-05867 CVE-2026-6688 · GHSA-8vm2-mjff-2gg2
FatFs Buffer Overflow via Unbounded LFN Filename Copy
Priority HIGH 68
FatFs R0.16 and earlier contains a downstream-caller vulnerability pattern associated with FatFs long filename handling.
Vulnerabilities
6 records
TI-2026-05866 CVE-2026-6687 · GHSA-wghw-hg6m-7rh3
FatFs Stack Buffer Overflow via Uncapped exFAT Label Length
Priority HIGH 68
FatFs R0.16 and earlier contains a stack overflow bug in f_getlabel() because exFAT label length (XDIR_NumLabel) is trusted without enforcing spec maximums.
TI-2026-05865 CVE-2026-6686 · GHSA-h94p-vjqx-v7rr
FatFs Use of Uninitialized Clusters After Seek Past EOF
Priority MEDIUM 54
FatFs R0.16 and earlier contains an uninitialized cluster exposure when f_lseek() extends files beyond EOF without zero-filling newly allocated clusters.
TI-2026-05864 CVE-2026-6684 · GHSA-vhc7-qgwj-vx6v
FatFs Infinite Loop in GPT Partition Scan
Priority MEDIUM 54
FatFs prior to R0.16 that use GPT scanning with 'FF_LBA64 = 1' contains an issue where an unbounded loop count derived from GPT header field GPTH_PtNum, enabling extremely long or effectively infinite mount-time scans.
TI-2026-05863 CVE-2026-6683 · GHSA-74cg-p8q3-4c3q
FatFs Divide-by-Zero in exFAT Sync
Priority LOW 21
FatFs R0.16 and earlier contains a divide-by-zero in exFAT sync logic bug when crafted metadata causes n_fatent - 2 to be zero during write/sync operations.
TI-2026-05862 CVE-2026-6682 · GHSA-c25x-vcg6-4ccx
FatFs Integer Overflow in FAT32 Volume Mount
Priority HIGH 68
In FatFS R0.16 and earlier contains a FAT32 integer overflow bug in mount_volume() where fasize *= fs->n_fats can wrap, leading to attacker-controlled file-size metadata and unsafe read lengths in downstream callers.