EUVD-2026-126101

littlefs through 2.11.3, when built with LFSMIGRATE, contains a type confusion vulnerability in lfsdirtraverse that treats a stack lfsdiskoff struct as an lfsattr array. Attackers can supply a crafted littlefs v1 image whose metadata is read as LFSFROMUSERATTRS during migration, causing...

CVE-2026-129490

The littlefs file system, through version 2.11.3 , is vulnerable to a type confusion flaw in the lfs_dir_traverse() function when compiled with the LFS_MIGRATE flag. The root cause occurs when the system treats a stack-based lfs_diskoff struct as an lfs_attr array. An attacker can exploit this by...