Libewf
Monthly
Heap out-of-bounds read in libewf through 20260924 allows an attacker to crash an application or leak uninitialized heap memory by supplying a crafted .L01/.Lx01 logical-evidence image containing oversized 'ea' (extended attribute) metadata counts. The flaw is reachable only when the tool actually parses the attacker-controlled image: the CVSS 4.0 vector is local (AV:L) with passive user interaction (UI:P) and no privileges required (PR:N), and impact is concentrated in availability (VA:H, a crash) with only limited confidentiality (VC:L, memory disclosure). Public exploit code exists, but the vulnerability is not confirmed as actively exploited in CISA KEV.
Heap out-of-bounds read in libewf through 20260924 allows an attacker to crash an application or leak uninitialized heap memory by supplying a crafted .L01/.Lx01 logical-evidence image containing oversized 'ea' (extended attribute) metadata counts. The flaw is reachable only when the tool actually parses the attacker-controlled image: the CVSS 4.0 vector is local (AV:L) with passive user interaction (UI:P) and no privileges required (PR:N), and impact is concentrated in availability (VA:H, a crash) with only limited confidentiality (VC:L, memory disclosure). Public exploit code exists, but the vulnerability is not confirmed as actively exploited in CISA KEV.