CVE-2026-42495

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...

CVE-2026-42495

CVE-2026-42495 affects the libfsimage iso9660 driver. The vulnerability stems from deriving several lengths directly from attacker-controlled on-disk fields without validation, with the System Use area calculation potentially underflowing. The connected documents do not provide explicit impact, e...

CVE-2026-62424

CVE-2026-62424 affects the libfsimage iso9660 driver (Rock Ridge NM record processing). Attacker-controlled on-disk fields derive several lengths without validation, with potential underflow in System Use/Rock Ridge length handling, and specifically NM record processing may rely on a good entry l...