Skip to content
OpenAdvisories

Package · Debian

libfsapfs

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.1

    libfsapfs through 20260921 Heap Out-of-Bounds Read via libfsapfs_key_encrypted_key_read_data

    libfsapfs through 20260921 contains an integer underflow in libfsapfs_key_encrypted_key_read_data() that allows attackers to trigger heap out-of-bounds reads via crafted KEK attributes. Attackers can supply a crafted encrypted APFS image with malformed HMAC o…