Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-91041

FileX fault-tolerant log replay writes past the destination sector when mounting a crafted FAT image

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
eclipse

Description

Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap write during log replay. The write is attacker-positioned and attacker-valued, and on a common embedded memory layout it reaches the FX_MEDIA driver callback, giving control of the instruction pointer.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Eclipse Foundation Eclipse ThreadX - FileX

Default version status: unaffected

  • 0 to ≤ 6.5.1.202602affected
  • 6.5.2.202603unaffected

References