sleuthkit

The Sleuth Kit INTRODUCTION The Sleuth Kit is an open source forensic toolkit for analyzing Microsoft and UNIX file systems and disks. The Sleuth Kit enables investigators to identify and recover evidence from images acquired during incident response or from live systems. The Sleuth Kit is open...

autotimeliner

AutoTimeliner Automagically extract forensic timeline from volatile memory dumps. AutoTimeliner runs multiple Volatility3 plugins against Windows, Linux, and macOS memory images, then merges their output into a single, sorted CSV timeline: Generic Timeline Plugin Plugin| What it captures ---|---...

CVE-2026-120454

A flaw was found in sleuthkit. An attacker can cause a Denial of Service DoS by providing a specially crafted HFS+ filesystem image with an excessively large uncompressed attribute size. When sleuthkit attempts to decompress the data, a memory allocation failure triggers a null pointer dereferenc...

CLEANSTART-2023-KU99303 In version 4

Security vulnerability affects the sleuthkit package. In version 4...

CLEANSTART-2023-KT34508 In version 4

Security vulnerability affects the sleuthkit package. In version 4...

sleuthkit:sleuthkit_fls_hfs_fuzzer: Crash in hfs_load_extended_attrs

Detailed Report: https://oss-fuzz.com/testcase?key=5807962357825536 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflshfsfuzzer Job Type: libfuzzerubsansleuthkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x55feffeb0781 Crash State: hfsloadextendedattrs...

CVE-2026-40026 affecting package sleuthkit for versions less than 4.12.1-2

CVE-2026-40026 affecting package sleuthkit for versions less than 4.12.1-2. A patched version of the package is available...

CVE-2026-40025 affecting package sleuthkit for versions less than 4.12.1-2

CVE-2026-40025 affecting package sleuthkit for versions less than 4.12.1-2. A patched version of the package is available...

CVE-2026-40024 affecting package sleuthkit for versions less than 4.12.1-2

CVE-2026-40024 affecting package sleuthkit for versions less than 4.12.1-2. A patched version of the package is available...

sleuthkit:fls_ntfs_fuzzer: Heap-buffer-overflow in ntfs_proc_attrseq

Detailed Report: https://oss-fuzz.com/testcase?key=5542460911845376 Project: sleuthkit Fuzzing Engine: honggfuzz Fuzz Target: flsntfsfuzzer Job Type: honggfuzzasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7d1329be1481 Crash State: ntfsprocattrseq...

sleuthkit:sleuthkit_fls_ntfs_fuzzer: Heap-buffer-overflow in ntfs_make_data_run

Detailed Report: https://oss-fuzz.com/testcase?key=5643957028847616 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflsntfsfuzzer Job Type: libfuzzerasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x798d63ae0c80 Crash State: ntfsmakedatar...

sleuthkit:sleuthkit_fls_hfs_fuzzer: Crash in hfs_load_extended_attrs

Detailed Report: https://oss-fuzz.com/testcase?key=5442328178524160 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflshfsfuzzer Job Type: libfuzzerubsansleuthkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x555f8ef2f4d3 Crash State: hfsloadextendedattrs...

sleuthkit:fls_ntfs_fuzzer: Heap-buffer-overflow in tsk_UTF16toUTF8

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=4716961889320960 Project: sleuthkit Fuzzing Engine: afl Fuzz Target: flsntfsfuzzer Job Type: aflasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

sleuthkit:fls_ntfs_fuzzer: Heap-buffer-overflow in ntfs_make_data_run

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=4845446867779584 Project: sleuthkit Fuzzing Engine: afl Fuzz Target: flsntfsfuzzer Job Type: aflasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

EUVD-2022-48503

Malicious code in bioql PyPI...

OS Command injection vulnerability in sleuthkit fls tool 4.11.1 allows attackers to execute arbitrary commands via a crafted value to the m parameter. NOTE: third parties have disputed this because there is no analysis showing that the backtick command executes outside the context of the user account that entered the command line.

...

sleuthkit:sleuthkit_fls_apfs_fuzzer: Crash in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5381794296037376 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflsapfsfuzzer Job Type: libfuzzerubsansleuthkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

CVE-2022-45639 affecting package sleuthkit 4.9.0-4

CVE-2022-45639 affecting package sleuthkit 4.9.0-4. This CVE either no longer is or was never applicable...

sleuthkit:sleuthkit_fls_hfs_fuzzer: Heap-buffer-overflow in hfs_load_extended_attrs

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5072584086978560 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflshfsfuzzer Job Type: libfuzzerasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash...

sleuthkit:sleuthkit_fls_fat_fuzzer: Index-out-of-bounds in tsk_img_read

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5145450555965440 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflsfatfuzzer Job Type: libfuzzerubsansleuthkit Platform Id: linux Crash Type: Index-out-of-bounds Crash Addres...