CVE-2026-111159: Out-of-bounds Read in libyal libewf

The vulnerability in libewf through version 0 (indicated as =0) involves an out-of-bounds read on the heap in the libewf_lef_extended_attribute_read_data() function. The root cause is improper validation of UTF-16 name and value sizes before they are doubled, which can be exploited by an attacker providing a specially crafted .L01 or .Lx01 file containing oversized 'ea' metadata counts. This can cause the application to crash or leak uninitialized heap memory via extended attributes.

Exploitation of this vulnerability can cause denial of service through application crashes or information disclosure by leaking uninitialized heap memory. There is no indication of privilege escalation or remote code execution. The attack vector is local (AV:L) with low attack complexity and no privileges required, but user interaction is needed. The impact on confidentiality is low, and there is no impact on integrity or availability beyond the crash.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, users should avoid processing untrusted .L01/.Lx01 files with libewf. Monitor vendor communications for updates on remediation.