CVE-2015-8026: Exfat Project Exfat

High severity, CVSS 7.8. EPSS: 4.5% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the verify_vbr_checksum function in exfatfsck in exfat-utils before 1.2.1 allows remote attackers to cause a denial of service (infinite loop) or possibly execute arbitrary code via a crafted filesystem.

Affected products

• Exfat Project Exfat: up to and including 1.2.0

Published 2017-03-27. Last modified 2026-06-17.