MEDIUMCVSS 5.5
littlefs through 2.11.3, when built with LFS_MIGRATE, contains a type confusion vulnerability in lfs_dir_traverse() that treats a stack lfs_diskoff struct as an lfs_attr array. Attackers can supply a crafted littlefs v1 image whose metadata is read as LFS_FROM_USERATTRS during migration, causing out-of-bounds stack reads and process crashes.
Published 2026-11-15 · last modified 2026-11-15
| Vendor | Product |
|---|---|
| littlefs-project | littlefs |
Ncerio by BeyondNets · data from NVD, CISA KEV, EPSS.