CVE-2026-120454

The Sleuth Kit through 4.15.0 contains a NULL pointer dereference vulnerability in decmpfsdecompresslzvnattr that allows attackers to crash the tool by supplying a crafted HFS+ image. Attackers can set a huge uncompressedsize in an LZVN inline com.apple.decmpfs attribute so allocation fails and t...

CVE-2026-120454

The Sleuth Kit through version 4.15.0 contains a NULL pointer dereference vulnerability in the decmpfs_decompress_lzvn_attr() function. An attacker can cause a denial of service (DoS) by providing a crafted HFS+ image with a very large uncompressed_size in an LZVN inline com.apple.decmpfs attribu...

EUVD-2026-115214

The Sleuth Kit through 4.15.0 contains a NULL pointer dereference vulnerability in decmpfsdecompresslzvnattr that allows attackers to crash the tool by supplying a crafted HFS+ image. Attackers can set a huge uncompressedsize in an LZVN inline com.apple.decmpfs attribute so allocation fails and t...