GCVE - cpe:2.3:a:sshock:afflib:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sshock:afflib:*:*:*:*:*:*:*:*

part: a version: * update: *

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-119601`	vulnerable	2026-11-03 10:17:11.943937	AFFLIB through 3.7.22 Heap Out-of-Bounds Write in af_get_page MEDIUM (6.1) AFFLIB through 3.7.22 contains a heap out-of-bounds write vulnerability in af_get_page() that allows attackers to corrupt heap memory by supplying crafted AFF images with mismatched page and sector sizes. Attackers can set a page size larger than and not a multiple of the sector size, causing the sector zero-fill loop to write past the buffer and crash forensic tools. Published: 2026-10-30T13:18:19.851Z Updated: 2026-11-05T21:29:11.823Z Open on db.gcve.eu Reference links https://github.com/sshock/AFFLIBv3/issues/61 https://github.com/sshock/AFFLIBv3/blob/v3.7.22/lib/afflib_pages.cpp#L309-L315 https://hackmd.io/@haindpwn/afflib-aff-get-page-sector-fill-oob-write https://github.com/sshock/AFFLIBv3 https://www.vulncheck.com/advisories/afflib-through-3.7.22-heap-out-of-bounds-write-in-af-get-page	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.