CVE-2026-89085

The parted utility contains a heap-based buffer overflow vulnerability (CWE-787) triggered by an integer calculation error during buffer allocation when processing a specially crafted FAT32 filesystem image. A local attacker can exploit this by tricking a user or automated service into opening a ...

CVE-2026-89085 Parted: parted: heap-based buffer overflow via crafted fat32 filesystem image

A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image,...