Lucene search
+L

26 matches found

Vulnrichment
Vulnrichment
added 2026/06/01 12:0 a.m.11 views

CVE-2025-70099

A NULL pointer dereference in the ext4direngetnamelen function in include/ext4dir.h of lwext4 1.0.0 allows attackers to cause a denial of service by supplying a specially crafted EXT4 filesystem image with malformed directory entries. During directory iteration, the code may fail to validate the...

5.9AI score0.00384EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/06/01 12:0 a.m.15 views

CVE-2025-70099

A NULL pointer dereference in the ext4direngetnamelen function in include/ext4dir.h of lwext4 1.0.0 allows attackers to cause a denial of service by supplying a specially crafted EXT4 filesystem image with malformed directory entries. During directory iteration, the code may fail to validate the...

5.9AI score0.00384EPSS
SaveExploits0References4
CVE
CVE
added 2026/06/01 12:0 a.m.27 views

CVE-2025-70099

CVE-2025-70099 : The Red Hat/NVD entries describe a NULL pointer dereference in lwext4 1.0.0 within ext4_dir_en_get_name_len (include/ext4_dir.h). During directory iteration, the code may not validate the directory entry pointer before accessing name_len, allowing a segmentation fault and denial ...

7.5CVSS5.9AI score0.00384EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/06/01 12:0 a.m.13 views

Grzegorz Kostka lwext4 异常处理不当漏洞

lwext4 is an embedded library developed by Grzegorz Kostka, designed to provide ext2/3/4 file systems for microcontrollers. Version 1.0.0 of lwext4 contains a security vulnerability; this vulnerability stems from a null pointer dereferencing in the ext4direngetnamelen function, which could lead t...

7.5CVSS5.3AI score0.00384EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2025/12/10 12:0 a.m.2 views

The vulnerability of the ext4_dir_en_get_name_len function in the lwext4 library, which allows a hacker to cause a service failure

The vulnerability of the ext4direngetnamelen function in the lwext4 library, which relates to the issue of handling zero pointers when processing damaged EXT4 directory entries. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

5.5CVSS5.8AI score
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/12/10 12:0 a.m.3 views

The vulnerability of the ext4_ext_binsearch_idx function in the lwext4 library allows a hacker to cause a service failure.

The vulnerability of the ext4extbinsearchidx function in the lwext4 library, related to reading beyond the array when processing damaged metadata of extent trees, occurs during the analysis of a specially crafted ext4 image. Exploitation of this vulnerability could allow an attacker to cause...

5.5CVSS5.8AI score
SaveExploits0References4Affected Software1
Rows per page
Query Builder