CVE-2018-11739

CVE-2018-11739 affects The Sleuth Kit (TSK) libtskimg.a, specifically the raw_read function in tsk/img/raw.c, with out-of-bounds reads in TS K releases 4.0.2–4.6.1. This can disclose memory content or cause a denial of service. The issue is confirmed across multiple connected sources; remediation...

CVE-2018-11740

The Sleuth Kit (TSK) vulnerability CVE-2018-11740 affects libtskbase.a (TSK) from releases 4.0.2 through 4.6.1. The issue is an out-of-bounds read in tsk_UTF16toUTF8 in tsk/base/tsk_unicode.c, which could allow an attacker to disclose information or read unmapped memory, potentially causing a den...

CVE-2018-11738

The Sleuth Kit (TSK) libtskfs.a versions 4.0.2–4.6.1 are affected by CVE-2018-11738 due to an out-of-bounds read in ntfs_make_data_run (tsk/fs/ntfs.c). This can disclose information or allow reading unmapped memory, potentially causing a denial of service. Connected advisories note fixes in later...

CVE-2018-11737

The Sleuth Kit (TSK) libtskfs.a releases 4.0.2–4.6.1 contain an out-of-bounds read in ntfs_fix_idxrec (tsk/fs/ntfs_dent.cpp) that could disclose information or read from unmapped memory, causing a denial of service (CVE-2018-11737). Related issues include CVE-2018-11738 (ntfs_make_data_run), CVE-...