Threats tagged 'ghsa-cmx5-359p-fw39'

AFFLIB versions through 3.7.22 have a heap out-of-bounds write vulnerability in the af_get_page() function. This flaw occurs when attackers supply crafted AFF images with mismatched page and sector sizes, specifically setting a page size larger than and not a multiple of the sector size. This causes a sector zero-fill loop to write beyond the allocated buffer, potentially crashing forensic tools that use AFFLIB.