CVE-2026-102730

Name of the Vulnerable Software and Affected Versions LevelX (affected versions not specified)

Description Mounting an attacker-controlled NAND flash image via the lx nand flash open() function triggers an unbounded out-of-bounds heap write within the NAND flash-translation-layer metadata parser. This occurs because the parser, which contains AI-generated portions, fails to check the on-flash count. The flaw allows an attacker to overwrite a driver function pointer in the control block, leading to a control-flow hijack where the Instruction Pointer (RIP) can be set to an attacker-chosen 8-byte value. Additionally, two out-of-bounds reads are present.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.