CVE-2026-120740Low· 2.0▾ SunlitA flaw was found in hivex. By supplying a specially crafted Windows registry hive file, an attacker can trigger an out-of-bounds memory read when hivex parses registry values containing malformed large data block lists. This issue can ca…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 11 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
A flaw was found in hivex. By supplying a specially crafted Windows registry hive file, an attacker can trigger an out-of-bounds memory read when hivex parses registry values containing malformed large data block lists. This issue can cause the application processing the registry file to crash, resulting in a Denial of Service (DoS).
hivex (all versions)hivex (all versions)hivex (all versions)virt-devel:rhel/hivex (all versions)virt:rhel/hivex (all versions)hivex (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2022-2127Medium· 5.9Samba: out-of-bounds read in winbind auth_crap
CVE-2026-120830High· 7.4Libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosure
CVE-2026-115456Low· 3.7Gcc: out-of-bounds read in std::from_chars
CVE-2026-118475Low· 3.6Eog: eye of gnome: buffer overrun when parsing malicious png files with non-standard iccp chunk
CVE-2026-112922Low· 3.3Ghostscript: out-of-bounds read in ghostscript shade_next_color via integer overflow of indexed color index in mesh shading
CVE-2026-93009Medium· 4.3Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder