Grzegorz Kostka lwext4 异常处理不当漏洞

lwext4 is an embedded library developed by Grzegorz Kostka, designed to provide ext2/3/4 file systems for microcontrollers. Version 1.0.0 of lwext4 contains a security vulnerability; this vulnerability stems from a null pointer dereferencing in the ext4direngetnamelen function, which could lead t...

lwext4 Heap Buffer Overflow DoS

The vulnerability of the ext4extbinsearchidx function in the lwext4 library, related to reading beyond the array when processing damaged metadata of extent trees, occurs during the analysis of a specially crafted ext4 image. Exploitation of this vulnerability could allow an attacker to cause...