CVE-2026-10719
LowCVSS 1.8Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
In openSeaChest v25.05.3, the --showSupportedFormats function has an out-of-bounds write. A malicious NVMe device with a bogus FLBAS byte can write 1 extra byte outside allocated memory.
Risk Assessment
Risk of memory corruption or code execution by an attacker with access to a connected NVMe device, potentially leading to system crash or privilege escalation.
Recommendation
Update openSeaChest to a patched version. Restrict tool access to trusted users and devices.
Original NVD description (English source)
Out of bounds write in openSeaChest’s --showSupportedFormats in Seagate’s openSeaChest v25.05.3 on all supported platforms allows for writing 1 extra byte outside of allocated memory which sets a value to 1 via a maliciously crafted NVMe device with a bogus value in the namespace FLBAS byte.