Description (CNA)
Out of bounds write in openSeaChest’s --showSupportedFormats in Seagate’s openSeaChest v25.05.3 on all supported platforms allows for writing 1 extra byte outside of allocated memory which sets a value to 1 via a maliciously crafted NVMe device with a bogus value in the namespace FLBAS byte.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Not supplied / Not supplied | affected 0 through 25.05.3 |
CWE
CWE-787
References
- https://www.seagate.com/product-security/#security-advisories
- https://www.seagate.com/support/software/seachest/
ADP enrichment
No English description supplied.
No references supplied.