CVE-2026-23950

node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3. This is due to an incomplete handling of Unicode path collisions in the path-reservations system. On case-insensitive or normalization-insensitive filesystems such as macOS APFS, In which it has...

CVE-2026-23950

node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3. This is due to an incomplete handling of Unicode path collisions in the "path-reservations" system. On case-insensitive or normalization-insensitive filesystems such as macOS APFS, In which it ha...

CVE-2026-23950

Summary of CVE-2026-23950 (node-tar) : A race condition in node-tar’s path-reservations on macOS APFS/HFS+ enables parallel processing of conflicting Unicode paths (e.g., “ß” vs “ss”), bypassing internal locks and allowing an Arbitrary File Overwrite . Affected are node-tar versions up to 7.5.3; ...

CVE-2026-23950 node-tar has Race Condition in Path Reservations via Unicode Ligature Collisions on macOS APFS

node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3. This is due to an incomplete handling of Unicode path collisions in the path-reservations system. On case-insensitive or normalization-insensitive filesystems such as macOS APFS, In which it has...

CVE-2026-23950 node-tar has Race Condition in Path Reservations via Unicode Ligature Collisions on macOS APFS

node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3. This is due to an incomplete handling of Unicode path collisions in the path-reservations system. On case-insensitive or normalization-insensitive filesystems such as macOS APFS, In which it has...

CVE-2026-23950 node-tar has Race Condition in Path Reservations via Unicode Ligature Collisions on macOS APFS

node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3. This is due to an incomplete handling of Unicode path collisions in the path-reservations system. On case-insensitive or normalization-insensitive filesystems such as macOS APFS, In which it has...

PT-2026-3529

Name of the Vulnerable Software and Affected Versions node-tar versions up to and including 7.5.3 Description node-tar, a Tar for Node.js, contains a race condition due to incomplete handling of Unicode path collisions within the path-reservations system. This issue occurs on case-insensitive or...

CVE-2026-23950: Improper Handling of Unicode Encoding

node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3. This is due to an incomplete handling of Unicode path collisions in the path-reservations system. On case-insensitive or normalization-insensitive filesystems such as macOS APFS, In which it has...

EUVD-2017-5301

Malware in sbrugna...

EUVD-2017-5315

Malware in sbrugna...

EUVD-2017-5402

Malware in sbrugna...

EUVD-2017-16187

Malware in sbrugna...

EUVD-2018-15894

Malware in sbrugna...

EUVD-2018-15891

Malware in sbrugna...

sleuthkit:sleuthkit_fls_apfs_fuzzer: Crash in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5381794296037376 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflsapfsfuzzer Job Type: libfuzzerubsansleuthkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

sleuthkit:sleuthkit_fls_apfs_fuzzer: Segv on unknown address in tsk_img_free

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=4797449401597952 Project: sleuthkit Fuzzing Engine: honggfuzz Fuzz Target: sleuthkitflsapfsfuzzer Job Type: honggfuzzasansleuthkit Platform Id: linux Crash Type: Segv on unknown address Crash...

About the security content of macOS Sonoma 14.6

About the security content of macOS Sonoma 14.6 This document describes the security content of macOS Sonoma 14.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases ar...

PT-2023-35728

Name of the Vulnerable Software and Affected Versions APFS affected versions not specified Description A heap buffer overflow read issue has been identified. The crash type is Heap-buffer-overflow READ 2. The crash state involves the APFSBtreeNodeIterator, specifically with APFSBtreeNode types...

sleuthkit:sleuthkit_fls_apfs_fuzzer: Heap-buffer-overflow in std::__1::enable_if<true, void>::type APFSBtreeNodeIterator<APFSBtreeNode<apfs_o

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6604037297668096 Project: sleuthkit Fuzzing Engine: afl Fuzz Target: sleuthkitflsapfsfuzzer Job Type: aflasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

PT-2022-36717

Name of the Vulnerable Software and Affected Versions APFS affected versions not specified Description A heap buffer overflow read issue has been identified. The crash occurs in the APFSJObject::add entry function, which is called by the APFSJObject::APFSJObject constructor. No information is...