A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resize a specially crafted FAT16 file system image with malformed directory metadata, an attacker can trigger an oversized read into a fixed-size memory buffer. This issue causes memory corruption, resulting in an application crash and a denial of service (DoS).

A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resize a specially crafted FAT16 file system image with malformed directory metadata, an attacker can trigger an oversized read into a fixed-size memory buffer. This issue causes memory corruption, resulting in an application crash and a denial of service (DoS).

Affected: openEuler:24.03-LTS-SP1: parted

The GNU Parted program allows you to create, destroy, resize, move, and copy hard disk partitions. Parted can be used for creating space for new operating systems, reorganizing disk usage, and copying data to new hard disks. Security Fix(es):

heap buffer overflow in duplicate_legacy_root_dir(CVE-2026-89088)

Affected: Ubuntu:14.04:LTS: parted, Ubuntu:16.04:LTS: parted, Ubuntu:18.04:LTS: parted, Ubuntu:20.04:LTS: parted, Ubuntu:22.04:LTS: parted, Ubuntu:24.04:LTS: parted, Ubuntu:26.04:LTS: parted

[heap buffer overflow in duplicate_legacy_root_dir]