CVEs published by runZero

CVEs published by runZero (CVE Numbering Authority). 6 tracked.

CVE-2026-6687 HIGH 7.6 UPGRADE FatFs R0.16 and earlier contains a stack overflow bug in f_getlabel() because exFAT label length (XDIR_NumLabe
CVE-2026-6682 HIGH 7.6 UPGRADE In FatFS R0.16 and earlier contains a FAT32 integer overflow bug in mount_volume() where fasize *= fs->n_fats
CVE-2026-6688 HIGH 7.6 UPGRADE FatFs R0.16 and earlier contains a downstream-caller vulnerability pattern associated with FatFs long filename
CVE-2026-6683 MEDIUM 4.6 UPGRADE FatFs R0.16 and earlier contains a divide-by-zero in exFAT sync logic bug when crafted metadata causes n_faten
CVE-2026-6684 MEDIUM 4.6 UPGRADE FatFs prior to R0.16 that use GPT scanning with 'FF_LBA64 = 1' contains an issue where an unbounded loop count
CVE-2026-6686 MEDIUM 4.6 UPGRADE FatFs R0.16 and earlier contains an uninitialized cluster exposure when f_lseek() extends files beyond EOF wit