CVE-2026-123269 in libvmdk
Prediction
by VulDB Data Team • 11/05/2026
A vulnerability was detected in <a href="/product/libyal:libvmdk">libyal libvmdk</a>. Affected by this vulnerability is the function <code>libvmdk_descriptor_file_read_header</code> of the file <em>libvmdk/libvmdk_descriptor_file.c</em> of the component <em>Descriptor File Parser</em>. The manipulation results in out-of-bounds read. The attack must be initiated from a local position. The exploit is now public and may be used. The patch is identified as <em>175d3fc0a0b961f362f16e7560a6169d7213e16b</em>. It is best practice to apply a patch to resolve this issue.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.