Post #3575203
2026-07-04 08:29 UTC
@Rairii@labyrinth.zone,
> CVE-2026-6688
Sounds like "if you don't check your buffer size, our callee is vulnerable in your caller's code"... What?
> CVE-2026-6687
As a side note, Microsoft violated the spec: "According to [EXFAT 1.00], the volume label limit is 11 characters. However, at least one third-party implementation (exfatlabel) and one old official implementation (the Windows 7 exFAT driver) allow 15 characters".
> CVE-2026-6682
Sounds like "you can hack your own device without using a debugger". They state that this results in a buffer overflow (reading more bytes into a fixed-size buffer).
Replies (1)
-
@Rairii@labyrinth.zone 2026-07-04 09:18
@errno_fail@infosec.exchange they say CVE-2026-6682 results in a buffer overflow, but i looked at the code and i don't see that at all