Eclipse Threadx Filex
Monthly
Out-of-bounds heap write in Eclipse FileX allows an attacker who can supply a malformed FAT image to corrupt heap memory during fault-tolerant log replay, with the write position and value under attacker control. On embedded layouts where the FX_MEDIA driver callback is within reach, this can redirect the instruction pointer and yield code execution; the CVSS 3.1 score is 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), reflecting a local path that requires the victim to mount attacker-controlled media. No public exploit code or CISA KEV entry was identified at time of analysis, and practical exposure is limited to builds with FileX fault tolerance enabled that mount untrusted FAT images.
Out-of-bounds heap write in Eclipse FileX allows an attacker who can supply a malformed FAT image to corrupt heap memory during fault-tolerant log replay, with the write position and value under attacker control. On embedded layouts where the FX_MEDIA driver callback is within reach, this can redirect the instruction pointer and yield code execution; the CVSS 3.1 score is 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), reflecting a local path that requires the victim to mount attacker-controlled media. No public exploit code or CISA KEV entry was identified at time of analysis, and practical exposure is limited to builds with FileX fault tolerance enabled that mount untrusted FAT images.