Filtered by vendor Libyal
Subscriptions
Filtered by product Libphdi
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-116737 | 1 Libyal | 1 Libphdi | 2026-11-02 | 6.1 Medium |
| libphdi through 20260902 contains a heap out-of-bounds read vulnerability in libphdi_data_files_get_extent_data_file_path that uses the directory prefix length instead of the basename length. Attackers can supply a crafted Parallels disk image descriptor with a long directory prefix and short basename to crash the process or expose adjacent heap memory. | ||||
Page 1 of 1.