This vulnerability involves an out-of-bounds write in the openSeaChest utility's --showSupportedFormats option in version 25.05.3. Specifically, a crafted NVMe device can trigger writing one byte beyond allocated memory, setting a value to 1 improperly. The issue arises from improper validation of the namespace FLBAS byte. The CVSS 4.0 base score is 1.8, indicating low severity. No remediation level or patch information is currently available, and no exploits have been reported.

The impact is limited to a single byte being written outside the allocated memory, which could potentially cause minor memory corruption. Given the low CVSS score and lack of known exploits, the practical impact appears minimal. The vulnerability requires high privileges and physical or local access to a malicious NVMe device, reducing the likelihood of widespread exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, avoid using untrusted NVMe devices with the affected version of openSeaChest. Monitor Seagate's advisories for updates on patches or mitigations.