exfatprogs before 1.2.2 allows out-of-bounds memory access, such as in readfiledentry_set.
{ "urgency": "not yet assigned" }