FatFs R0.16 and earlier exhibits a stale dirty-cache skip via unsigned-subtraction wrap in f_read() / f_write() (fp->sect - sect < cc) during interleaved read/write on fragmented filesystems. This ma…
中危 CVSS 6.1
摘要
FatFs R0.16 and earlier exhibits a stale dirty-cache skip via unsigned-subtraction wrap in f_read() / f_write() (fp->sect - sect < cc) during interleaved read/write on fragmented filesystems. This maps to CWE-191 (Integer Underflow). Estimated CVSS v3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H (6.1, Medium). The estimated CISA SSVC vectors are Exploitation: PoC, Technical Impact: Total. Note that this issue has been disputed by the Supplier. It will be rejected shortly.
中文摘要建设中，暂以英文摘要呈现（DR-003 v2）。
深度研判 · 自动通道
该漏洞尚未生成深度研判报告（DR-003 v2 AI pipeline 建设中）。
受影响产品
- :
Lint 边界警告 (3)
以下是本次研判 lint 阶段发现的非阻塞性警告（如引用 URL 未在白名单内）。这些不影响漏洞条目可用性，仅为透明度披露（参 DR-002）。
-
REF_URL_NOT_ALLOWLISTEDurl not in allowlist: https://elm-chan.org/fsw/ff/ -
REF_URL_NOT_ALLOWLISTEDurl not in allowlist: https://www.runzero.com/advisories/fatfs-unsigned-sub-wrap-cve-2026-6685/ -
REF_URL_NOT_ALLOWLISTEDurl not in allowlist: https://www.runzero.com/blog/fatfs-bugs/
数据来源
- NVD DATABASE
原始链接
- https://elm-chan.org/fsw/ff/ Product
- https://github.com/runZeroInc/vulns-2026-fatfs-chance Exploit
- https://www.runzero.com/advisories/fatfs-unsigned-sub-wrap-cve-2026-6685/ Third Party Advisory
- https://www.runzero.com/blog/fatfs-bugs/ Exploit
时间线
- nvd_ingest NVD