CVE-2026-10718
MediumCVSS 4.6Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
In Seagate's openSeaChest version 26.03.0, the Trim/Unmap operation writes 16 bytes outside the allocated memory space when describing a range of LBAs to deallocate.
Risk Assessment
Out-of-bounds write can lead to data corruption, system instability, or potentially arbitrary code execution by an attacker.
Recommendation
Update openSeaChest to a version later than 26.03.0 that includes a fix for this issue.
Other vulnerabilities in openSeaChest
See all- CVE-2026-10719Low
In openSeaChest v25.05.3, the --showSupportedFormats function has an out-of-bounds write. A malicious NVMe device with a bogus FLBAS byte can write 1 extra byte outside allocated memory.
- CVE-2026-10717Low
In openSeaChest v25.05.3, the --showSCSIDefects function has out-of-bounds writes and reads. A malicious SCSI device with a very long defect list can write defect info out of bounds.
Original NVD description (English source)
Out of bounds write in openSeaChest’s Trim/Unmap operation in Seagate’s openSeaChest v26.03.0 on all supported platforms allows for writing extra memory describing a range of LBAs to deallocate 16 bytes outside of the allocated space when running this operation.