Buffer Management Issues in Velociraptor's NTFS Parsing Library

CVE-2026-17535

What is CVE-2026-17535?

The Velociraptor NTFS parsing library is susceptible to out-of-bounds errors and memory exhaustion vulnerabilities. These weaknesses can be exploited by attackers through maliciously crafted NTFS image files, particularly in scenarios involving forensic analysis of dead disk images. When employed in such untrusted contexts, these vulnerabilities can lead to application crashes and ultimately result in a Denial of Service, impacting system integrity and availability.

References