CVE-2026-13478

CVE-2026-13478 is an out-of-bounds read in the Zephyr RTOS ext2 filesystem driver. During mount, ext2_init_fs() passes the superblock's s_blocks_count (unbounded) to ext2_bitmap_count_set(), which then reads up to ~512 MB past the single block-size bitmap buffer when a crafted image specifies an ...