CVE-2026-10717
LowCVSS 1.8Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
In openSeaChest v25.05.3, the --showSCSIDefects function has out-of-bounds writes and reads. A malicious SCSI device with a very long defect list can write defect info out of bounds.
Risk Assessment
Risk of memory corruption or sensitive data disclosure by an attacker with access to a connected SCSI device, potentially leading to crash or information leak.
Recommendation
Update openSeaChest to a patched version. Restrict tool access to trusted users and devices.
Original NVD description (English source)
Out of bounds write and reads in openSeaChest’s --showSCSIDefects in Seagate’s openSeaChest v25.05.3 on all supported platforms allows for writing defect information out of bounds for very large defects lists via a very bad drive with lots of defects or a maliciously crafted SCSI device’s defect response length.