This vulnerability involves an out-of-bounds write in the Trim/Unmap operation of Seagate's openSeaChest v26.03.0. Specifically, the operation writes 16 bytes outside the allocated memory space when describing a range of LBAs to deallocate. The issue affects all supported platforms running this version. The CVSS 4.6 score reflects a medium severity with local attack vector, low complexity, and required high privileges. No official remediation or patch has been disclosed yet.

The out-of-bounds write can lead to memory corruption, which may cause application instability or unexpected behavior. Given the requirement for high privileges and local access, the impact is limited to authorized users on the affected system. There is no indication of remote exploitation or privilege escalation from the provided data. No known exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to systems running the affected version to trusted users with appropriate privileges. Monitor vendor communications for updates on patches or workarounds.