PT-2026-54927

CVE-2026-6685

Published

2026-07-01

Updated

2026-07-06

Description by

CVSS 3.1

6.1

Medium

MetricsAV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions FatFs versions R0.16 and earlier

Description An integer underflow occurs during interleaved read and write operations on fragmented filesystems. This issue is caused by an unsigned-subtraction wrap in the f read() and f write() functions when evaluating the condition fp->sect - sect < cc, which leads to a stale dirty-cache skip.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Hd Moore

Runzerox

Tod Beardsley

Vendors

Affected products

Weakness enumeration

CWE-191: Integer Underflow (Wrap or Wraparound)