openSeaChest vulnerabilities

In openSeaChest v25.05.3, the --showSupportedFormats function has an out-of-bounds write. A malicious NVMe device with a bogus FLBAS byte can write 1 extra byte outside allocated memory.

In Seagate's openSeaChest version 26.03.0, the Trim/Unmap operation writes 16 bytes outside the allocated memory space when describing a range of LBAs to deallocate.

In openSeaChest v25.05.3, the --showSCSIDefects function has out-of-bounds writes and reads. A malicious SCSI device with a very long defect list can write defect info out of bounds.