PT-2026-31462

The Sleuth Kit through 4.14.0 contains an out-of-bounds read vulnerability in the APFS filesystem keybag parser where the wrapped key parser class follows attacker-controlled length fields without bounds checking, causing heap reads past the allocated buffer. An attacker can craft a malicious APF...

PT-2026-31463

The Sleuth Kit through 4.14.0 contains an out-of-bounds read vulnerability in the ISO9660 filesystem parser where the parse susp function trusts len id, len des, and len src fields from the disk image to memcpy data into a stack buffer without verifying that the source data falls within the parse...

EUVD-2007-4182

Malware in sbrugna...

EUVD-2018-3759

Malware in sbrugna...

EUVD-2007-4179

Malware in sbrugna...

EUVD-2007-4178

Malware in sbrugna...

EUVD-2018-3758

Malware in sbrugna...

EUVD-2018-11186

Malware in sbrugna...

EUVD-2007-4183

Malware in sbrugna...

EUVD-2018-3756

Malware in sbrugna...

EUVD-2018-3757

Malware in sbrugna...

EUVD-2020-2690

Malware in sbrugna...

EUVD-2019-5701

Malware in sbrugna...

EUVD-2019-1814

Malware in sbrugna...

EUVD-2019-5702

Malware in sbrugna...

EUVD-2017-5273

Malware in sbrugna...

EUVD-2020-2691

Malware in sbrugna...

EUVD-2012-5505

Malware in sbrugna...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: sleuthkit (UTSA-2025-986095)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986095 advisory. In version 4.8.0 and earlier of The Sleuth Kit TSK, there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfsistat in...

OESA-2025-2107 sleuthkit security update

The Sleuth Kit previously known as TASK is a collection of UNIX-based command line file system forensic tools that allow an investigator to examine NTFS, FAT, FFS, EXT2FS, EXT3FS and ExFAT file systems of a suspect computer in a non-intrusive fashion. The tools have a layer-based design and can...