Skip to content
OpenAdvisories

Package · Debian

sleuthkit

25 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 3.3

    The Sleuth Kit through 4.15.0 Heap Out-of-Bounds Read via HFS+ decmpfs Header

    The Sleuth Kit through 4.15.0 contains a heap out-of-bounds read vulnerability in hfs_load_extended_attrs() in tsk/fs/hfs.c that reads the decmpfs header without checking attribute length. Attackers can supply a crafted HFS+ image with a com.apple.decmpfs att…