PT-2026-118370 · Eclipse Foundation · Eclipse Threadx - Filex

·

CVE-2026-91041

·

Published

2026-10-20

·

Updated

2026-10-20

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap write during log replay. The write is attacker-positioned and attacker-valued, and on a common embedded memory layout it reaches the FX MEDIA driver callback, giving control of the instruction pointer.

Fix

Memory Corruption

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-91041

Affected Products

Eclipse Threadx - Filex