A heap out-of-bounds read vulnerability exists in libfvde versions through 20260923. The flaw occurs in the function libfvde_encrypted_metadata_read_type_0x0024() due to missing bounds checking on xml_plist_data_size against the source metadata block. This can lead to a crash when processing a specially crafted FileVault 2 Core Storage volume.