Heap Out-of-Bounds Read Vulnerability in The Sleuth Kit by Sleuth Kit
CVE-2026-120453

4.8MEDIUM

Key Information:

Vendor

The Sleuth Kit

Status
The Sleuth Kit
Vendor
CVE Published:
2 November 2026

What is CVE-2026-120453?

The Sleuth Kit version 4.15.0 is susceptible to a heap out-of-bounds read vulnerability in the hfs_load_extended_attrs() function, which processes HFS+ images. This vulnerability allows attackers to supply specially crafted HFS+ images with a com.apple.decmpfs attribute size between 1 and 15, potentially leading to reading beyond allocated memory boundaries. Such exploitation may result in crashes of analysis tools like istat or icat, posing significant risks to data integrity and system stability.

Affected Version(s)

The Sleuth Kit 0 <= 4.15.0

References

https://github.com/sleuthkit/sleuthkit/issues/3583
issue-tracking
https://github.com/sleuthkit/sleuthkit/blob/sleuthkit-4.1...
technical-description
https://github.com/sleuthkit/sleuthkit/releases/tag/sleut...
release-notes

CVSS V4

Score:
4.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

HaiND from the Post and Telecommunication Institute of Technology
.