CVE-2021-3504

CVE-2021-3504 affects the hivex library: lack of bounds checking in hivex_open can allow a crafted Windows Registry hive to read memory beyond bounds or crash the application. Affected: hivex versions before 1.3.20. The issue enables a denial-of-service crash/vector, with the highest impact on av...

CVE-2021-3622

CVE-2021-3622 affects the hivex library, where inputting a specially crafted Windows Registry hive can trigger a recursive _get_children() call, causing a stack overflow and impacting system availability. Public details in connected documents confirm hivex as the affected component and the root c...