Multiple CVEs Address Issues in exFAT File System
First seen 18 Feb 2026, 10:13 UTC
•
•41
Export
Article Content
Browse articles
Two vulnerabilities in the exFAT file system have been identified and addressed. CVE-2024-57940, published on January 21, 2025, fixes an infinite loop in the exfat_readdir() function, while CVE-2025-38692, published on September 4, 2025, adds a cluster chain loop check for directories.
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Timeline
2025-01-21
CVE-2024-57940 published
2025-09-04
CVE-2025-38692 published
2026-02-18
Information published about both CVEs