GNU mtools through 4.0.49 has an out-of-bounds write in parse_vses in vfat.c.
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-111176.json"