{"id":"CVE-2026-123269","published":"2026-11-06T01:17:48.783","lastModified":"2026-11-06T01:17:48.933","description":"A vulnerability was detected in libyal libvmdk. Affected by this vulnerability is the function libvmdk_descriptor_file_read_header of the file libvmdk/libvmdk_descriptor_file.c of the component Descriptor File Parser. The manipulation results in out-of-bounds read. The attack must be initiated from a local position. The exploit is now public and may be used. The patch is identified as 175d3fc0a0b961f362f16e7560a6169d7213e16b. It is best practice to apply a patch to resolve this issue.","cvssScore":3.3,"cvssSeverity":"LOW","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwes":["CWE-119","CWE-125"],"vendors":[],"products":[],"references":[{"url":"https://github.com/libyal/libvmdk/","tags":[]},{"url":"https://github.com/libyal/libvmdk/commit/175d3fc0a0b961f362f16e7560a6169d7213e16b","tags":[]},{"url":"https://github.com/libyal/libvmdk/issues/41","tags":[]},{"url":"https://github.com/user-attachments/files/33394231/03_integer_underflow_poc.zip","tags":[]},{"url":"https://vuldb.com/cve/CVE-2026-123269","tags":[]},{"url":"https://vuldb.com/submit/1032842","tags":[]},{"url":"https://vuldb.com/vuln/431575","tags":[]},{"url":"https://vuldb.com/vuln/431575/cti","tags":[]}],"exploitRefs":[{"url":"https://github.com/libyal/libvmdk/","tags":[]},{"url":"https://github.com/libyal/libvmdk/commit/175d3fc0a0b961f362f16e7560a6169d7213e16b","tags":[]},{"url":"https://github.com/libyal/libvmdk/issues/41","tags":[]},{"url":"https://github.com/user-attachments/files/33394231/03_integer_underflow_poc.zip","tags":[]}],"hasPoc":true,"ai":null}