TrueCrypt Project TrueCrypt 7.1 A

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:truecrypt_project:truecrypt:7.1:a:*:*:*:*:*:*

part: a version: 7.1 update: a

VendorTruecrypt Project (073ba761-df25-5557-841f-842910e99602)
ProductTruecrypt (26ebd7c5-4b59-5b45-ae51-dd7bbe9171e2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bitbucket/wjdavis5/truecrypt purl2cpe 2026-06-01 10:12:31.981293
pkg:github/fauxfaux/truecrypt purl2cpe 2026-06-01 10:12:31.981296
pkg:github/freeapophis/truecrypt purl2cpe 2026-06-01 10:12:31.981299
pkg:gitlab/kalilinux/truecrypt purl2cpe 2026-06-01 10:12:31.981302
pkg:sourceforge/truecrypt purl2cpe 2026-06-01 10:12:31.981304

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-2885 vulnerable 2026-06-08 05:05:30.124359 Details available
Multiple integer overflows in TrueCrypt 7.1a allow local users to (1) obtain sensitive information via vectors involving a crafted item->OriginalLength value in the MainThreadProc function in EncryptedIoQueue.c or (2) cause a denial of service (memory consumption) via vectors involving large StartingOffset and Length values in the ProcessVolumeDeviceControlIrp function in Ntdriver.c.
Published: 2018-03-19T21:00:00.000Z
Updated: 2024-08-06T10:28:46.188Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2884 vulnerable 2026-06-08 05:05:30.123809 Details available
The ProcessVolumeDeviceControlIrp function in Ntdriver.c in TrueCrypt 7.1a allows local users to bypass access restrictions and obtain sensitive information about arbitrary files via a (1) TC_IOCTL_OPEN_TEST or (2) TC_IOCTL_GET_SYSTEM_DRIVE_CONFIG IOCTL call.
Published: 2018-03-19T21:00:00.000Z
Updated: 2024-08-06T10:28:46.249Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.