CVE-2020-13598

Name of the Vulnerable Software and Affected Versions Zephyr versions >= v1.14.2, >= v2.3.0

Description A buffer overflow issue occurs when Long File Names are enabled in FAT FS and the fs stat function is called, resulting in a stack-based buffer overflow.

Recommendations For Zephyr versions >= v1.14.2, >= v2.3.0, consider disabling the Long File Names feature in FAT FS until a patch is available. As a temporary workaround, restrict the use of the fs stat function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.