https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-05T23:05:27.287233+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-120454 CVE-2026-120454 — The Sleuth Kit through 4.15.0 NULL Pointer Dereference via decmpfs LZVN Decompression 2026-11-05T23:05:27.288237+00:00

Affected: The Sleuth Kit

The Sleuth Kit through 4.15.0 contains a NULL pointer dereference vulnerability in decmpfs_decompress_lzvn_attr() that allows attackers to crash the tool by supplying a crafted HFS+ image. Attackers can set a huge uncompressed_size in an LZVN inline com.apple.decmpfs attribute so allocation fails and the decoder writes through NULL, causing denial of service.