Out-of-Bounds Write in openSeaChest via NVMe Device

Publication date: 2026-06-02

Last updated on: 2026-06-02

Assigner: Seagate Technology

Description

Out of bounds write in openSeaChest’s --showSupportedFormats in Seagate’s openSeaChest v25.05.3 on all supported platforms allows for writing 1 extra byte outside of allocated memory which sets a value to 1 via a maliciously crafted NVMe device with a bogus value in the namespace FLBAS byte.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-02

Last Modified

2026-06-02

Generated

2026-07-14

AI Q&A

2026-06-03

EPSS Evaluated

2026-07-12

NVD

CVE-2026-10719

EUVD

EUVD-2026-34045

Affected Vendors & Products

Vendor	Product	Version / Range
seagate	openseachest	25.05.3

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is an out of bounds write issue in the openSeaChest software, specifically in the --showSupportedFormats feature of Seagate's openSeaChest version 25.05.3. It occurs on all supported platforms and allows writing one extra byte outside of the allocated memory. This happens when a maliciously crafted NVMe device provides a bogus value in the namespace FLBAS byte, causing the software to set a value to 1 outside its intended memory boundary.

Impact Analysis

The vulnerability allows writing one extra byte outside of allocated memory, which can lead to memory corruption. Although the CVSS base score is low (1.8), indicating limited impact, such memory corruption could potentially cause unexpected behavior, crashes, or data integrity issues when interacting with malicious NVMe devices.

Hi! I’m here to help you understand CVE-2026-10719. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70