Hello Charles,
We have never seen a yaffs vulnerability was disclosed at NVD(https://nvd.nist.gov/) or CVE(https://cve.mitre.org/).
Is there no vulnerability in yaffs, or is there any other vulnerability disclosure channel?
Regards,
Liao Hua