CVE-2026-40026

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-40026
The Sleuth Kit through 4.14.0 contains an out-of-bounds read vulnerability in the ISO9660 filesystem parser where the parse_susp() function trusts len_id, len_des, and len_src fields from the disk image to memcpy data into a stack buffer without verifying that the source data falls within the parsed SUSP block. An attacker can craft a malicious ISO image that causes reads past the end of the SUSP data buffer, and a zero-length SUSP entry can trigger an infinite parsing loop.

4.4 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 2.5

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://github.com/sleuthkit/sleuthkit/commit/a95b0ac21733b059a517aaefa667a17e1bcbdee1 Patch
https://github.com/sleuthkit/sleuthkit/pull/3445 Issue Tracking
https://mobasi.ai/sentinel Third Party Advisory
https://www.vulncheck.com/advisories/sleuth-kit-iso9660-susp-extension-reference-out-of-bounds-read Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:sleuthkit:the_sleuth_kit:*:*:*:*:*:*:*:*
History

24 Jul 2026, 21:10

Type Values Removed Values Added
Summary
  • (es) The Sleuth Kit hasta 4.14.0 contiene una vulnerabilidad de lectura fuera de límites en el analizador del sistema de archivos ISO9660 donde la función parse_susp() confía en los campos len_id, len_des y len_src de la imagen de disco para copiar datos (memcpy) en un búfer de pila sin verificar que los datos de origen se encuentren dentro del bloque SUSP analizado. Un atacante puede crear una imagen ISO maliciosa que provoca lecturas más allá del final del búfer de datos SUSP, y una entrada SUSP de longitud cero puede desencadenar un bucle de análisis infinito.

17 Apr 2026, 17:14

Type Values Removed Values Added
First Time Sleuthkit
Sleuthkit the Sleuth Kit
CPE cpe:2.3:a:sleuthkit:the_sleuth_kit:*:*:*:*:*:*:*:*
References () https://github.com/sleuthkit/sleuthkit/commit/a95b0ac21733b059a517aaefa667a17e1bcbdee1 - () https://github.com/sleuthkit/sleuthkit/commit/a95b0ac21733b059a517aaefa667a17e1bcbdee1 - Patch
References () https://github.com/sleuthkit/sleuthkit/pull/3445 - () https://github.com/sleuthkit/sleuthkit/pull/3445 - Issue Tracking
References () https://mobasi.ai/sentinel - () https://mobasi.ai/sentinel - Third Party Advisory
References () https://www.vulncheck.com/advisories/sleuth-kit-iso9660-susp-extension-reference-out-of-bounds-read - () https://www.vulncheck.com/advisories/sleuth-kit-iso9660-susp-extension-reference-out-of-bounds-read - Third Party Advisory

08 Apr 2026, 22:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-04-08 22:16

Updated : 2026-07-24 21:10

NVD link : CVE-2026-40026

Mitre link : CVE-2026-40026

CVE.ORG link : CVE-2026-40026

JSON object : View

Products Affected

sleuthkit

  • the_sleuth_kit
CWE
CWE-125

Out-of-bounds Read