Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2026-107634 →
DEBIAN-CVE-2026-107634
Dislocker through 0.7.3 contains a heap out-of-bounds read vulnerability in get_dataset() and get_next_datum() that never validate dataset and datum s...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Dislocker through 0.7.3 contains a heap out-of-bounds read vulnerability in get_dataset() and get_next_datum() that never validate dataset and datum sizes against the metadata allocation. Attackers can craft a BitLocker volume image with inflated dataset or datum sizes that, when opened or mounted, crashes dislocker or discloses adjacent heap memory.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
dislocker
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:13
dislocker
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:14
dislocker
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Références
- advisory security-tracker.debian.org