https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-24T21:36:57.185247+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-111159 fkie_cve-2026-111159 2026-10-24T21:36:57.187804+00:00

libewf through 20260924 contains a heap out-of-bounds read vulnerability in libewf_lef_extended_attribute_read_data() because UTF-16 name and value sizes are validated before being doubled. Attackers can supply a crafted .L01/.Lx01 file with oversized 'ea' metadata counts to crash the application or leak uninitialized heap memory through extended attributes.

 https://db.gcve.eu/vuln/ghsa-xjw3-jc7r-r4g6 GHSA-xjw3-jc7r-r4g6 2026-10-24T21:36:57.187899+00:00

libewf through 20260924 contains a heap out-of-bounds read vulnerability in libewf_lef_extended_attribute_read_data() because UTF-16 name and value sizes are validated before being doubled. Attackers can supply a crafted .L01/.Lx01 file with oversized 'ea' metadata counts to crash the application or leak uninitialized heap memory through extended attributes.

 https://db.gcve.eu/vuln/ubuntu-cve-2026-111159 UBUNTU-CVE-2026-111159 2026-10-24T21:36:57.187942+00:00

Affected: Ubuntu:16.04:LTS: libewf, Ubuntu:18.04:LTS: libewf, Ubuntu:20.04:LTS: libewf, Ubuntu:22.04:LTS: libewf, Ubuntu:24.04:LTS: libewf, Ubuntu:26.10: libewf, Ubuntu:26.04:LTS: libewf

libewf through 20260924 contains a heap out-of-bounds read vulnerability in libewf_lef_extended_attribute_read_data() because UTF-16 name and value sizes are validated before being doubled. Attackers can supply a crafted .L01/.Lx01 file with oversized 'ea' metadata counts to crash the application or leak uninitialized heap memory through extended attributes.