Skip to content
OpenAdvisories

Vendor

ChaN

6 known vulnerabilities.

Products

FatFs 6
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.6
    CVE-2026-6688

    FatFs Buffer Overflow via Unbounded LFN Filename Copy

    FatFs R0.16 and earlier contains a downstream-caller vulnerability pattern associated with FatFs long filename handling. With LFN enabled, fno.fname can be up to 255 characters; many callers copy it into short fixed buffers without bounds checks, causing over…

    ChaN FatFs
  • High 7.6
    CVE-2026-6687

    FatFs Stack Buffer Overflow via Uncapped exFAT Label Length

    FatFs R0.16 and earlier contains a stack overflow bug in f_getlabel() because exFAT label length (XDIR_NumLabel) is trusted without enforcing spec maximums. This maps to CWE-121 (Stack-based Buffer Overflow). Estimated CVSS v3.1 vector: CVSS:3.1/AV:P/AC:L/PR:…

    ChaN FatFs
  • High 7.6
    CVE-2026-6682

    FatFs Integer Overflow in FAT32 Volume Mount

    In FatFS R0.16 and earlier contains a FAT32 integer overflow bug in mount_volume() where fasize *= fs->n_fats can wrap, leading to attacker-controlled file-size metadata and unsafe read lengths in downstream callers. This maps to CWE-190 (Integer Overflow or …

    ChaN FatFs