CVE-2026-91041 — FileX fault-tolerant log replay writes past the destination sector when mounting a crafted FAT image

CVE-2026-91041

FileX fault-tolerant log replay writes past the destination sector when mounting a crafted FAT image PUBLISHED

Description (CNA)

Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap write during log replay. The write is attacker-positioned and attacker-valued, and on a common embedded memory layout it reaches the FX_MEDIA driver callback, giving control of the instruction pointer.

Affected (CNA)

Vendor / product	Versions
Eclipse Foundation / Eclipse ThreadX - FileX	affected 0 through 6.5.1.202602; unaffected 6.5.2.202603

CWE

CWE-787, CWE-1284

References

https://github.com/eclipse-threadx/filex/security/advisories/GHSA-c8cj-fj9j-426v

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.