Afflib
Monthly
Heap out-of-bounds write in AFFLIB through 3.7.22 during page reads: when a crafted AFF (Advanced Forensic Format) image declares a page size that is larger than and not an integer multiple of its sector size, the sector zero-fill loop in af_get_page() writes past the allocated heap buffer. The issue is local and requires a user or operator to open or ingest the untrusted image (UI:P), and the assessed impact is no confidentiality loss, limited integrity damage and high availability impact, meaning the practical outcome is a corrupted heap and crash of the forensic tool. A public technical write-up of the flaw exists but is not verified as working exploit code, and there is no CISA KEV entry; the vendor priority is 'this_month' rather than an emergency.
The af_get_page() function in lib/afflib_pages.cpp in AFFLIB (aka AFFLIBv3) through 3.7.16 allows remote attackers to cause a denial of service (segmentation fault) via a corrupt AFF image that. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
Heap out-of-bounds write in AFFLIB through 3.7.22 during page reads: when a crafted AFF (Advanced Forensic Format) image declares a page size that is larger than and not an integer multiple of its sector size, the sector zero-fill loop in af_get_page() writes past the allocated heap buffer. The issue is local and requires a user or operator to open or ingest the untrusted image (UI:P), and the assessed impact is no confidentiality loss, limited integrity damage and high availability impact, meaning the practical outcome is a corrupted heap and crash of the forensic tool. A public technical write-up of the flaw exists but is not verified as working exploit code, and there is no CISA KEV entry; the vendor priority is 'this_month' rather than an emergency.
The af_get_page() function in lib/afflib_pages.cpp in AFFLIB (aka AFFLIBv3) through 3.7.16 allows remote attackers to cause a denial of service (segmentation fault) via a corrupt AFF image that. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.