eclipse-threadx_levelx_nand_driver vulnerabilities

CVEs whose affected-version data names the eclipse-threadx_levelx_nand_driver package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-102730High· 8.6

today

Mounting an attacker-controlled NAND flash image (`lx_nand_flash_open()`) triggers an unbounded out-of-bounds heap write in LevelX's NAND flash-translation-layer metadata parser that overwrites a driver function pointer in the contro…

Mounting an attacker-controlled NAND flash image (`lx_nand_flash_open()`) triggers an unbounded out-of-bounds heap **write** in LevelX's NAND flash-translation-layer metadata parser that overwrites a driver function pointer in the contro…

▾ TwilightEclipse Foundation · eclipse-threadx/levelx(NAND driver)via NVD