CVE-2026-40025

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-40025
The Sleuth Kit through 4.14.0 contains an out-of-bounds read vulnerability in the APFS filesystem keybag parser where the wrapped_key_parser class follows attacker-controlled length fields without bounds checking, causing heap reads past the allocated buffer. An attacker can craft a malicious APFS disk image that triggers information disclosure or crashes when processed by any Sleuth Kit tool that parses APFS volumes.

4.4 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 2.5

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://github.com/sleuthkit/sleuthkit/commit/8b9c9e7d493bd68624f3b1a3963edd45c3ff7611 Patch
https://github.com/sleuthkit/sleuthkit/pull/3444 Issue Tracking
https://mobasi.ai/sentinel Third Party Advisory
https://www.vulncheck.com/advisories/sleuth-kit-apfs-keybag-parser-out-of-bounds-read Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:sleuthkit:the_sleuth_kit:*:*:*:*:*:*:*:*
History

25 Jul 2026, 11:10

Type Values Removed Values Added
Summary
  • (es) El Sleuth Kit hasta la versión 4.14.0 contiene una vulnerabilidad de lectura fuera de límites en el analizador de keybag del sistema de archivos APFS, donde la clase wrapped_key_parser sigue campos de longitud controlados por el atacante sin verificación de límites, causando lecturas de heap más allá del búfer asignado. Un atacante puede crear una imagen de disco APFS maliciosa que desencadena la revelación de información o fallos cuando es procesada por cualquier herramienta de Sleuth Kit que analiza volúmenes APFS.

13 Apr 2026, 20:28

Type Values Removed Values Added
References () https://github.com/sleuthkit/sleuthkit/commit/8b9c9e7d493bd68624f3b1a3963edd45c3ff7611 - () https://github.com/sleuthkit/sleuthkit/commit/8b9c9e7d493bd68624f3b1a3963edd45c3ff7611 - Patch
References () https://github.com/sleuthkit/sleuthkit/pull/3444 - () https://github.com/sleuthkit/sleuthkit/pull/3444 - Issue Tracking
References () https://mobasi.ai/sentinel - () https://mobasi.ai/sentinel - Third Party Advisory
References () https://www.vulncheck.com/advisories/sleuth-kit-apfs-keybag-parser-out-of-bounds-read - () https://www.vulncheck.com/advisories/sleuth-kit-apfs-keybag-parser-out-of-bounds-read - Third Party Advisory
CPE cpe:2.3:a:sleuthkit:the_sleuth_kit:*:*:*:*:*:*:*:*
First Time Sleuthkit
Sleuthkit the Sleuth Kit

08 Apr 2026, 22:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-04-08 22:16

Updated : 2026-07-25 11:10

NVD link : CVE-2026-40025

Mitre link : CVE-2026-40025

CVE.ORG link : CVE-2026-40025

JSON object : View

Products Affected

sleuthkit

  • the_sleuth_kit
CWE
CWE-125

Out-of-bounds Read