littlefs-project vulnerabilities and threats

CVE-2026-129490 is a type confusion vulnerability in littlefs versions up to 2.11.3 when built with LFS_MIGRATE. The flaw occurs in the lfs_dir_traverse() function, where a stack structure is incorrectly treated as an array, leading to out-of-bounds stack reads and potential process crashes when processing crafted littlefs v1 images during migration.