Live › vulnerability › CVE-2026-119601
AFFLIB, a library for reading Advanced Forensics Format disk images, has a heap out-of-bounds write in af_get_page() when page and sector sizes are mismatched. A crafted AFF image can corrupt heap memory and crash tools that open it, and the sources do not say whether code execution is possible.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 14:30 UTC. All times on this page are UTC.
Teams that run forensic tooling or scripts that open AFF disk images with AFFLIB 3.7.22 or earlier are exposed when they process untrusted images. Systems that never open AFF files, or that only handle images they created themselves, are unlikely to be affected. The sources do not say whether a fixed version exists.
No product ranges from the sources yet.
dpkg -l | grep -i afflib or rpm -qa | grep -i afflib3.7.22)No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
AFFLIB through 3.7.22 contains a heap out-of-bounds write vulnerability in af_get_page() that allows attackers to corrupt heap memory by supplying crafted AFF images with mismatched page and sector sizes. Attackers can set a page size larger than and not a multiple of the sector size, causing the sector zero-fill loop to write past the buffer and crash forensic tools.
This page as .md · .json · in your agent: get_signal("CVE-2026-119601")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.