Threats tagged 'ghsa-h27m-mw24-wfwv'

The Sleuth Kit versions through 4.15.0 have a heap out-of-bounds read vulnerability in the hfs_load_extended_attrs() function. This flaw occurs because the function reads the decmpfs header without verifying the attribute length, allowing crafted HFS+ images with specific attribute sizes to cause out-of-bounds reads and crash analysis tools such as istat or icat.