Seagate openSeaChest Out-of-Bounds Write Vulnerability in NVMe Device Handling

A vulnerability allowing an out-of-bounds write has been identified in Seagate's openSeaChest version 25.05.3, across all supported platforms. This issue arises in the '--showSupportedFormats' function, where the software improperly manages memory when interacting with NVMe devices. Specifically, it allows for writing an extra byte outside of allocated memory by exploiting a bogus value in the namespace FLBAS byte. This mismanagement could potentially be leveraged to manipulate memory in a harmful way.

Impact

Exploitation of this vulnerability could lead to memory corruption, allowing for arbitrary code execution or causing a crash by disrupting normal application processing.