Velocidex Velociraptor versions prior to 0.76.5 contain an off-by-one error in the ConsumeUnit16Array and ConsumeUnit64Array functions. This flaw can be triggered by a local attacker supplying a specially crafted .evtx file to the parse_evtx VQL plugin, causing a denial of service via process crash. The issue affects both Windows and Linux platforms. A fix is available in version 0.76.5.