CVE-2025-70101

The lwext4 1.0.0 library, an embedded library providing ext2/3/4 file systems for microcontrollers, contains an out-of-bounds read vulnerability in the ext4_ext_binsearch_idx function located in src/ext4_extent.c. The root cause is insufficient validation of extent header fields before performing...