https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-05T03:22:09.933576+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-120454 fkie_cve-2026-120454 2026-11-05T03:22:09.935507+00:00

The Sleuth Kit through 4.15.0 contains a NULL pointer dereference vulnerability in decmpfs_decompress_lzvn_attr() that allows attackers to crash the tool by supplying a crafted HFS+ image. Attackers can set a huge uncompressed_size in an LZVN inline com.apple.decmpfs attribute so allocation fails and the decoder writes through NULL, causing denial of service.

 https://db.gcve.eu/vuln/ghsa-gr3p-v4fr-f93c GHSA-gr3p-v4fr-f93c 2026-11-05T03:22:09.935689+00:00

The Sleuth Kit through 4.15.0 contains a NULL pointer dereference vulnerability in decmpfs_decompress_lzvn_attr() that allows attackers to crash the tool by supplying a crafted HFS+ image. Attackers can set a huge uncompressed_size in an LZVN inline com.apple.decmpfs attribute so allocation fails and the decoder writes through NULL, causing denial of service.

 https://db.gcve.eu/vuln/ubuntu-cve-2026-120454 UBUNTU-CVE-2026-120454 2026-11-05T03:22:09.935743+00:00

Affected: Ubuntu:Pro:14.04:LTS: sleuthkit, Ubuntu:Pro:16.04:LTS: sleuthkit, Ubuntu:18.04:LTS: sleuthkit, Ubuntu:20.04:LTS: sleuthkit, Ubuntu:22.04:LTS: sleuthkit, Ubuntu:24.04:LTS: sleuthkit, Ubuntu:26.10: sleuthkit, Ubuntu:26.04:LTS: sleuthkit

The Sleuth Kit through 4.15.0 contains a NULL pointer dereference vulnerability in decmpfs_decompress_lzvn_attr() that allows attackers to crash the tool by supplying a crafted HFS+ image. Attackers can set a huge uncompressed_size in an LZVN inline com.apple.decmpfs attribute so allocation fails and the decoder writes through NULL, causing denial of service.