Seven Unpatched FatFs Flaws Expose Millions of Embedded Devices to Code Execution
Security firm runZero has disclosed seven unpatched vulnerabilities in FatFs, a widely used filesystem library for FAT and exFAT formats, embedded in…
Tag: FatFs
CVE-2026-6685: FatFs Cache Handling Math Wrap on Fragmented Volumes
A math wrap in FatFs cache handling on fragmented volumes can silently corrupt data. CVSS 6.1 (Medium).
CVE-2026-6683: FatFs exFAT Divide-by-Zero Crash
A divide-by-zero in exFAT handling can crash or brick devices. CVSS 4.6 (Medium).
CVE-2026-6686: FatFs File Extended Past End Leaks Deleted Data
A file extended past its end in FatFs can leak leftover data from deleted files. CVSS 4.6 (Medium).
CVE-2026-6684: FatFs Malformed GPT Partition Table Hang
A malformed GPT partition table can hang the device during mount. Fixed in FatFs R0.16. CVSS 4.6 (Medium).
FatFs Library Vulnerabilities Expose Embedded Devices
FatFs is a filesystem library for FAT/exFAT used in millions of embedded devices. Seven unpatched flaws were disclosed.