CVE-2026-123269
libyal libvmdk Descriptor File libvmdk_descriptor_file.c libvmdk_descriptor_file_read_header out-of-bounds
A vulnerability was detected in libyal libvmdk. Affected by this vulnerability is the function libvmdk_descriptor_file_read_header of the file libvmdk/libvmdk_descriptor_file.c of the component Descriptor File Parser. The manipulation results in out-of-bounds read. The attack must be initiated from a local position. The exploit is now public and may be used. The patch is identified as 175d3fc0a0b961f362f16e7560a6169d7213e16b. It is best practice to apply a patch to resolve this issue.
Fixes and workarounds
Fix
The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.
Source: CNA: VulDBAffected products and versions
| Product | Versions | Authority |
|---|---|---|
| libvmdk libyal |
Version not specified (affected) | CNA: VulDB |
Version ranges are source assertions. Check the vendor advisory and your installed configuration before determining exposure.
CVSS assessments
| Version / score | Vector | Authority |
|---|---|---|
| 4.0 / 4.8 medium |
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P | CNA: VulDB |
| 3.1 / 3.3 low |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C | CNA: VulDB |
| 3.0 / 3.3 low |
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C | CNA: VulDB |
| 2.0 / 1.7 low |
AV:L/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:OF/RC:C | CNA: VulDB |
Exploit evidence
- https://github.com/user-attachments/files/33394231/03_integer_underflow_poc.zip
exploit · CNA: VulDB
References
- https://vuldb.com/vuln/431575CNA: VulDB · vdb-entry, technical-description
- https://vuldb.com/vuln/431575/ctiCNA: VulDB · signature, permissions-required
- https://vuldb.com/cve/CVE-2026-123269CNA: VulDB · third-party-advisory
- https://vuldb.com/submit/1032842CNA: VulDB · third-party-advisory
- https://github.com/libyal/libvmdk/issues/41CNA: VulDB · issue-tracking
- https://github.com/user-attachments/files/33394231/03_integer_underflow_poc.zipCNA: VulDB · exploit
- https://github.com/libyal/libvmdk/commit/175d3fc0a0b961f362f16e7560a6169d7213e16bCNA: VulDB · patch
- https://github.com/libyal/libvmdk/CNA: VulDB · product
For agents and automation
Read public disclosures for free as Markdown or JSON. Compatible browsers also expose native WebMCP tools to search disclosures, read this page, and discover API access.
Use the ontology-linked Cyber API with x402 pay per request, or a Y2 Pro or Elite API key with the intel:cyber scope.
Endpoints and access details
https://api.y2.dev/api/v2/cyber/cveshttps://api.y2.dev/api/v2/cyber/cves/{cveId}
A workspace owner or admin can create a Pro or Elite API key. Send Authorization: Bearer <Y2_API_KEY> from your trusted agent runtime.
For x402, omit Authorization and read the HTTP 402 payment challenge before signing a retry. Public browser tools do not make payments.