CVE-2026-116729 libfvde through 20260923 Heap Out-of-Bounds Read via libfvde_encrypted_metadata_read_type_0x001a

libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvdeencryptedmetadatareadtype0x001a caused by an unbounded strlen on embedded XML plist data. Attackers can supply a crafted FileVault 2 volume with non-NUL-terminated plist data, causing libfvdevolumeopen to read pas...

CVE-2026-116729

Versions of libfvde up to 20260923 are susceptible to a heap out-of-bounds read vulnerability in the libfvde_encrypted_metadata_read_type_0x001a() function. The root cause is an unbounded strlen operation performed on embedded XML plist data. An attacker can provide a crafted FileVault 2 volume c...

CVE-2026-116728 libfvde through 20260923 Heap Out-of-Bounds Read via libfvde_encrypted_metadata_read_type_0x0024

libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvdeencryptedmetadatareadtype0x0024 because xmlplistdatasize is not checked against the source metadata block. Attackers can supply a crafted FileVault 2 Core Storage volume that makes libfvdevolumeopen copy past the...

CVE-2026-116728

The libfvde library, in versions through 20260923 , is vulnerable to a heap out-of-bounds read in the libfvde_encrypted_metadata_read_type_0x0024() function. The root cause is a failure to validate xml_plist_data_size against the source metadata block. An attacker can provide a crafted FileVault ...

EUVD-2016-8435

Malware in sbrugna...

Is My Mac Secure from Malware and Viruses?

Do you own a Mac? If so, you might have the common perception that they’re more secure from internet threats than Windows PCs. Unfortunately, this isn’t the case. The truth is that Macs have historically not been targeted by hackers as frequently as Windows systems, simply because there were fewe...

Design/Logic Flaw

An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves mishandling of DMA in the "EFI" component. It allows physically proximate attackers to discover the FileVault 2 encryption password via a crafted Thunderbolt adapter...

CVE-2016-7585

An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves mishandling of DMA in the "EFI" component. It allows physically proximate attackers to discover the FileVault 2 encryption password via a crafted Thunderbolt adapter...

CVE-2016-7585

An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves mishandling of DMA in the "EFI" component. It allows physically proximate attackers to discover the FileVault 2 encryption password via a crafted Thunderbolt adapter...

CVE-2016-7585

CVE-2016-7585 affects macOS versions prior to 10.12.4, describing a DMA handling flaw in the EFI component that can allow a physically proximate attacker (via Thunderbolt) to recover the FileVault 2 encryption password. The connected sources confirm a pre-boot DMA risk targeting EFI and note miti...

CVE-2016-7585: Undefined Security Weakness

An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves mishandling of DMA in the "EFI" component. It allows physically proximate attackers to discover the FileVault 2 encryption password via a crafted Thunderbolt adapter...

PT-2017-9229

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.12.4 Description The issue involves mishandling of DMA in the "EFI" component, allowing physically proximate attackers to discover the FileVault 2 encryption password via a crafted Thunderbolt adapter. Recommendation...

Setting a custom FileVault (macOS FDE) passphrase

FileVault 2 is the full-disk encryption system of macOS. Normally, it's turned on from System Preferences, and locks the disk with the passwords of all the users allowed to unlock the machine. Overloading the login/unlock/sudo password is an understandable UX simplicity choice, but makes it very...

Setting a custom FileVault (macOS FDE) passphrase

FileVault 2 is the full-disk encryption system of macOS. Normally, it's turned on from System Preferences, and locks the disk with the passwords of all the users allowed to unlock the machine. Overloading the login/unlock/sudo password is an understandable UX simplicity choice, but makes it very...

Flaw in OS X Lion Encryption Leaves User Credentials in Plaintext

There’s a serious weakness in certain versions of Apple OS X that causes the operating system to store users’ login credentials for the FileVault encrypted storage in plaintext. The bug, which is found in older versions of FileVault present on OS X Lion 10.7.3 systems, enables anyone with admin...

Apple Revamps Security in OS X Lion

Apple has released the newest version of its OS X operating system, dubbed Lion, and it includes a batch of new security protections that bring it up to the level of Windows and Internet Explorer. The most significant additions, experts say, is the full implementation of ASLR and a sandbox that...