Threats affecting pkg:github/libyal/libvmdk

CVE-2026-123268 is a medium severity memory corruption vulnerability in the libvmdk component of the libyal project. It affects the function libvmdk_extent_table_get_extent_data_file_path in the Extent Data File Handler. The vulnerability can be triggered remotely and has publicly disclosed exploit code. The product uses a rolling release model, so exact affected versions are not specified. A patch identified by commit 175d3fc0a0b961f362f16e7560a6169d7213e16b is available and recommended for remediation.