Approved changes feed: RSS · Atom
cpe:2.3:a:chan:fatfs:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Chan (9a21731f-6071-512c-a86c-5960cb955d9d) |
|---|---|
| Product | Fatfs (4c45f73a-7d16-560d-862f-18639ff4efec) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-6688 |
vulnerable | 2026-07-29 01:06:21.092332 |
FatFs Buffer Overflow via Unbounded LFN Filename Copy
HIGH (7.6)
FatFs R0.16 and earlier contains a downstream-caller vulnerability pattern associated with FatFs long filename handling. With LFN enabled, fno.fname can be up to 255 characters; many callers copy it into short fixed buffers without bounds checks, causing overflow. This maps to CWE-120 (Buffer Copy without Checking Size of Input). Estimated CVSS v3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H (7.6, High). The estimated CISA SSVC vectors are Exploitation: PoC, Technical Impact: Total.
Published: 2026-07-01T14:01:04.915Z
Updated: 2026-07-01T15:06:59.026Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6687 |
vulnerable | 2026-07-29 01:06:21.092093 |
FatFs Stack Buffer Overflow via Uncapped exFAT Label Length
HIGH (7.6)
FatFs R0.16 and earlier contains a stack overflow bug in f_getlabel() because exFAT label length (XDIR_NumLabel) is trusted without enforcing spec maximums. This maps to CWE-121 (Stack-based Buffer Overflow). Estimated CVSS v3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H (7.6, High). The estimated CISA SSVC vectors are Exploitation: PoC, Technical Impact: Total.
Published: 2026-07-01T13:57:54.242Z
Updated: 2026-07-01T15:06:24.705Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6686 |
vulnerable | 2026-07-29 01:06:21.091959 |
FatFs Use of Uninitialized Clusters After Seek Past EOF
MEDIUM (4.6)
FatFs R0.16 and earlier contains an uninitialized cluster exposure when f_lseek() extends files beyond EOF without zero-filling newly allocated clusters. This maps to CWE-908 (Use of Uninitialized Resource). Estimated CVSS v3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (4.6, Medium). The estimated CISA SSVC vectors are Exploitation: PoC, Technical Impact: Partial.
Published: 2026-07-01T13:55:09.072Z
Updated: 2026-07-01T15:05:27.926Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6685 |
vulnerable | 2026-07-29 01:06:21.091633 |
Details available
Published: 2026-07-01T13:47:25.764Z
Updated: 2026-07-16T20:11:12.305Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6684 |
vulnerable | 2026-07-29 01:06:21.091509 |
FatFs Infinite Loop in GPT Partition Scan
MEDIUM (4.6)
FatFs prior to R0.16 that use GPT scanning with 'FF_LBA64 = 1' contains an issue where an unbounded loop count derived from GPT header field GPTH_PtNum, enabling extremely long or effectively infinite mount-time scans. This maps to CWE-835 (Loop with Unreachable Exit Condition). Estimated CVSS v3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (4.6, Medium). The estimated CISA SSVC vectors are Exploitation: PoC, Technical Impact: Partial.
Published: 2026-07-01T13:45:03.639Z
Updated: 2026-07-01T15:25:53.071Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6683 |
vulnerable | 2026-07-29 01:06:21.091373 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6682 |
vulnerable | 2026-07-29 01:06:21.091163 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.