GNU mtools versions up to 4.0.49 contain an out-of-bounds write vulnerability in the parse_vses function within vfat.c. This flaw can lead to a denial of service or other impacts due to memory corruption. The vulnerability has a CVSS score of 6.1, indicating a medium severity level.