Unpatched Flaws Disclosed in Filesystem Bundled Into Millions of Embedded Devices

Security firm runZero has identified seven vulnerabilities in the FatFs filesystem library, which is widely used in embedded devices. FatFs is a small library that enables devices to read and write FAT and exFAT formats on USB drives and SD cards. The library is commonly found in the firmware of various devices, including security cameras, drones, and industrial controllers. These vulnerabilities are significant due to the widespread presence of FatFs in millions of devices. The affected devices also include hardware crypto wallets and other embedded systems. The flaws pose a potential risk to the security of these devices.