CVE-2026-111159 in libewf
要約
〜によって MITRE • 2026年10月15日
libewf through 20260924 contains a heap out-of-bounds read vulnerability in libewf_lef_extended_attribute_read_data() because UTF-16 name and value sizes are validated before being doubled. Attackers can supply a crafted .L01/.Lx01 file with oversized 'ea' metadata counts to crash the application or leak uninitialized heap memory through extended attributes.
VulDB is the best source for vulnerability data and more expert information about this specific topic.