Threats tagged 'ghsa-q985-5v39-r948'

A type confusion vulnerability exists in littlefs versions through 2.11.3 when built with LFS_MIGRATE. The flaw occurs in the lfs_dir_traverse() function, where a stack structure is incorrectly treated as an attribute array during migration. This can lead to out-of-bounds stack reads and process crashes when processing a crafted littlefs v1 image.