Skip to content
OpenAdvisories

Package · Debian

binwalk

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 5.3
    CVE-2026-7179

    OSPG binwalk WinCE Extraction Plugin winceextract.py read_null_terminated_string path traversal

    A security vulnerability has been detected in OSPG binwalk up to 2.4.3. This vulnerability affects the function read_null_terminated_string of the file src/binwalk/plugins/winceextract.py of the component WinCE Extraction Plugin. Such manipulation of the argu…

    OSPG binwalk binwalk binwalk Debian Ubuntu
  • High 7.8
    CVE-2022-4510 Public exploit EPSS 23%

    Path Traversal in binwalk

    A path traversal vulnerability was identified in ReFirm Labs binwalk from version 2.1.2b through 2.3.3 included. By crafting a malicious PFS filesystem file, an attacker can get binwalk's PFS extractor to extract files at arbitrary locations when binwalk is r…

    ReFirm Labs binwalk binwalk binwalk Debian Ubuntu PyPI
  • Medium 5.0
    CVE-2021-4287

    ReFirm Labs binwalk Archive Extraction extractor.py symlink

    A vulnerability, which was classified as problematic, was found in ReFirm Labs binwalk up to 2.3.2. Affected is an unknown function of the file src/binwalk/modules/extractor.py of the component Archive Extraction Handler. The manipulation leads to symlink fol…

    ReFirm Labs binwalk binwalk binwalk Debian Ubuntu PyPI