Elektrine lite

← Feed

@errno_fail@infosec.exchange

Post #3575203

2026-07-04 08:29 UTC

@Rairii@labyrinth.zone, > CVE-2026-6688 Sounds like "if you don't check your buffer size, our callee is vulnerable in your caller's code"... What? > CVE-2026-6687 As a side note, Microsoft violated the spec: "According to [EXFAT 1.00], the volume label limit is 11 characters. However, at least one third-party implementation (exfatlabel) and one old official implementation (the Windows 7 exFAT driver) allow 15 characters". > CVE-2026-6682 Sounds like "you can hack your own device without using a debugger". They state that this results in a buffer overflow (reading more bytes into a fixed-size buffer).

Replies (1)

  • @Rairii@labyrinth.zone 2026-07-04 09:18

    @errno_fail@infosec.exchange they say CVE-2026-6682 results in a buffer overflow, but i looked at the code and i don't see that at all

    Open ##3578797