CVE-2026-111159: libewf through 20260924 Heap Out-of-Bounds Read via L01 Extended Attribute Parsing
libewf through 20260924 contains a heap out-of-bounds read vulnerability in libewflefextendedattributereaddata() because UTF-16 name and value sizes are validated before being doubled. Attackers can supply a crafted .L01/.Lx01 file with oversized 'ea' metadata counts to crash the application or leak uninitialized heap memory through extended attributes.
Affected Software
Event History
Frequently Asked Questions
What conditions are required to exploit this issue?
An attacker needs to provide a crafted .L01 or .Lx01 file containing oversized extended-attribute ("ea") metadata counts. Exploitation also requires a user or application to process that file with an affected libewf version.
What impact should be expected from a malicious file?
Processing the crafted file can crash the application because of a heap out-of-bounds read. It may also expose uninitialized heap memory through extended attributes.
Which deployments are exposed?
Deployments are exposed when they use libewf to parse .L01 or .Lx01 files from untrusted sources. The supplied data does not identify any configuration prerequisite beyond processing a malicious file.