Skip to content
OpenAdvisories

Vendor

The Sleuth Kit

3 known vulnerabilities.

Products

The Sleuth Kit 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2026-120454

    The Sleuth Kit through 4.15.0 NULL Pointer Dereference via decmpfs LZVN Decompression

    The Sleuth Kit through 4.15.0 contains a NULL pointer dereference vulnerability in decmpfs_decompress_lzvn_attr() that allows attackers to crash the tool by supplying a crafted HFS+ image. Attackers can set a huge uncompressed_size in an LZVN inline com.apple…

    The Sleuth Kit The Sleuth Kit sleuthkit sleuthkit Debian Ubuntu Azure Linux