Libfsapfs
Monthly
Heap out-of-bounds reads in libfsapfs through 20260921 can be triggered by a crafted encrypted APFS image, enabling adjacent heap memory disclosure and application crashes. The flaw is an integer underflow in libfsapfs_key_encrypted_key_read_data() that occurs during parsing of malformed HMAC or wrapped KEK attribute lengths, before any password verification, so no encryption key is needed. This local, user-interaction-dependent issue has a medium severity (CVSS 4.0 base 6.9) and no public exploit identified at time of analysis.
Heap out-of-bounds reads in libfsapfs through 20260921 can be triggered by a crafted encrypted APFS image, enabling adjacent heap memory disclosure and application crashes. The flaw is an integer underflow in libfsapfs_key_encrypted_key_read_data() that occurs during parsing of malformed HMAC or wrapped KEK attribute lengths, before any password verification, so no encryption key is needed. This local, user-interaction-dependent issue has a medium severity (CVSS 4.0 base 6.9) and no public exploit identified at time of analysis.