CVE-2026-120453

The Sleuth Kit through 4.15.0 contains a heap out-of-bounds read vulnerability in hfsloadextendedattrs in tsk/fs/hfs.c that reads the decmpfs header without checking attribute length. Attackers can supply a crafted HFS+ image with a com.apple.decmpfs attrsize of 1 to 15 to read past the allocatio...

EUVD-2026-115213

The Sleuth Kit through 4.15.0 contains a heap out-of-bounds read vulnerability in hfsloadextendedattrs in tsk/fs/hfs.c that reads the decmpfs header without checking attribute length. Attackers can supply a crafted HFS+ image with a com.apple.decmpfs attrsize of 1 to 15 to read past the allocatio...

CVE-2026-120453 The Sleuth Kit through 4.15.0 Heap Out-of-Bounds Read via HFS+ decmpfs Header

The Sleuth Kit through 4.15.0 contains a heap out-of-bounds read vulnerability in hfsloadextendedattrs in tsk/fs/hfs.c that reads the decmpfs header without checking attribute length. Attackers can supply a crafted HFS+ image with a com.apple.decmpfs attrsize of 1 to 15 to read past the allocatio...

PT-2026-135469

The Sleuth Kit through 4.15.0 contains a heap out-of-bounds read vulnerability in hfs load extended attrs in tsk/fs/hfs.c that reads the decmpfs header without checking attribute length. Attackers can supply a crafted HFS+ image with a com.apple.decmpfs attr size of 1 to 15 to read past the...

CVE-2026-120453: The Sleuth Kit: The Sleuth Kit through 4.15.0 contains a heap out-of-bounds read vulnerability in hfs_load_extended_attrs() in…

The Sleuth Kit through 4.15.0 contains a heap out-of-bounds read vulnerability in hfsloadextendedattrs in tsk/fs/hfs.c that reads the decmpfs header without checking attribute length. Attackers can supply a crafted HFS+ image with a com.apple.decmpfs attrsize of 1 to 15 to read past the allocatio...

CVE-2024-56737

GNU GRUB aka GRUB2 through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem...

CVE-2024-56737: Heap-based Buffer Overflow

GNU GRUB aka GRUB2 through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem...

CVE-2019-1010065

The Sleuth Kit 4.6.0 and earlier is affected by: Integer Overflow. The impact is: Opening crafted disk image triggers crash in tsk/fs/hfsdent.c:237. The component is: Overflow in fls tool used on HFS image. Bug is in tsk/fs/hfs.c file in function hfscattraverse in lines: 952, 1062. The attack...

CVE-2019-1010065: Integer Overflow or Wraparound

The Sleuth Kit 4.6.0 and earlier is affected by: Integer Overflow. The impact is: Opening crafted disk image triggers crash in tsk/fs/hfsdent.c:237. The component is: Overflow in fls tool used on HFS image. Bug is in tsk/fs/hfs.c file in function hfscattraverse in lines: 952, 1062. The attack...