CVE-2026-120740

A flaw in hivex allows an attacker to trigger an out-of-bounds memory read by providing a specially crafted Windows registry hive file . The vulnerability occurs when the tool parses registry values containing malformed large data block lists . If exploited, this flaw can cause the application pr...

CVE-2026-120740 Hivex: hivex: denial of service via out-of-bounds read in big-data block processing

A flaw was found in hivex. By supplying a specially crafted Windows registry hive file, an attacker can trigger an out-of-bounds memory read when hivex parses registry values containing malformed large data block lists. This issue can cause the application processing the registry file to crash,...