CVE-2026-102730 Memory corruption in eclipse-threadx/levelx(NAND driver)
An attacker can achieve arbitrary code execution by mounting a malicious NAND flash image that triggers a heap overflow in the LevelX NAND driver.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-102730?
CVE-2026-102730 is a high-severity memory corruption vulnerability in eclipse-threadx/levelx(NAND driver), published on 29 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Mounting an attacker-controlled NAND flash image (`lx_nand_flash_open()`) triggers an unbounded out-of-bounds heap **write** in LevelX's NAND flash-translation-layer metadata parser that overwrites a driver function pointer in the control block, giving a demonstrated control-flow hijack — RIP set to a full 8-byte attacker-chosen value (register-verified). Two accompanying OOB reads. All reproduced verbatim under ASan at HEAD `9f1cfdc`. (The affected metadata-parser header states "Some portions generated by Copilot (Sonnet 4.6)" — an AI-generated parser with an unchecked on-flash count.)
Which versions are affected by CVE-2026-102730?
How do I fix CVE-2026-102730?
No fix has been published for CVE-2026-102730 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2026-102730 being exploited?
There is no known exploitation of CVE-2026-102730 in the wild and no public exploit code.
Sources
Also known as GHSA-g54v-9g2q-gvrg.