CVE-2026-13478

Name of the Vulnerable Software and Affected Versions Zephyr (affected versions not specified)

Description The ext2 filesystem driver contains an out-of-bounds read issue during the mounting of an ext2 image. The ext2 init fs() function in subsys/fs/ext2/ext2 impl.c calls ext2 bitmap count set() in subsys/fs/ext2/ext2 bitmap.c, passing a block count derived from the superblock. Because the s blocks count and s first data block variables are not validated against the actual capacity of the bitmap buffer BGROUP BLOCK BITMAP, a crafted image with an oversized s blocks count can force the system to read up to 512 MB of memory beyond the intended buffer. This occurs when the ext2 mount() function in subsys/fs/ext2/ext2 ops.c is used to mount untrusted media. This flaw can lead to a system crash and denial of service when the read operation crosses an unmapped or MPU-protected memory boundary.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.