Threat database

Dislocker versions up to 0.7.3 contain an integer underflow vulnerability in the get_vmk() and get_fvek() functions. This flaw allows attackers to cause out-of-bounds heap reads by supplying a malicious BitLocker volume image with a datum_size smaller than the expected 36-byte AES-CCM header. The vulnerability can lead to application crashes due to over-read in the hexdump() function.

Dislocker versions up to 0.7.3 contain a heap out-of-bounds read vulnerability in the functions get_dataset() and get_next_datum(). This flaw arises because the software does not validate dataset and datum sizes against metadata allocation, allowing crafted BitLocker volume images with inflated sizes to cause crashes or disclose adjacent heap memory.