Out of Bounds Write Vulnerability in Seagate's OpenSeaChest Software
CVE-2026-10719

1.8LOW

Key Information:

Status
Vendor
CVE Published:
2 June 2026

What is CVE-2026-10719?

An out of bounds write vulnerability exists in Seagate's OpenSeaChest 25.05.3, affecting all supported platforms. This flaw enables a malicious NVMe device to craft a bogus FLBAS byte, resulting in writing one extra byte outside the allocated memory. This could potentially lead to unauthorized modifications of data or system behavior, challenging the integrity and security of the storage solution. Users are advised to consult Seagate's security advisories for detailed mitigation steps.

References

https://www.seagate.com/product-security/#security-adviso...
https://www.seagate.com/support/software/seachest/

CVSS V4

Score:
1.8
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.