{"id":"CVE-2026-91041","published":"2026-10-20T14:17:04.350","lastModified":"2026-10-20T19:48:50.250","description":"Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap write during log replay. The write is attacker-positioned and attacker-valued, and on a common embedded memory layout it reaches the FX_MEDIA driver callback, giving control of the instruction pointer.","cvssScore":7.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-787","CWE-1284"],"vendors":[],"products":[],"references":[{"url":"https://github.com/eclipse-threadx/filex/security/advisories/GHSA-c8cj-fj9j-426v","tags":[]}],"exploitRefs":[{"url":"https://github.com/eclipse-threadx/filex/security/advisories/GHSA-c8cj-fj9j-426v","tags":[]}],"hasPoc":true,"ai":null}