Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Priority LOW 29

Dislocker through 0.7.3 contains an integer underflow vulnerability in get_vmk() and get_fvek() that allows attackers to trigger out-of-bounds heap reads via crafted datum sizes.

CVSS 4.0MEDIUM 6.9 Local No auth User interaction EPSS 0.00127 Published 2026-10-08 No fix listed CWE-191
Priority LOW 29

Dislocker through 0.7.3 contains a heap out-of-bounds read vulnerability in get_dataset() and get_next_datum() that never validate dataset and datum sizes against the metadata allocation.

CVSS 4.0MEDIUM 6.9 Local No auth User interaction EPSS 0.00127 Published 2026-10-08 No fix listed CWE-125