CVE-2026-116729: libfvde through 20260923 Heap Out-of-Bounds Read via libfvde_encrypted_metadata_read_type_0x001a
libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvdeencryptedmetadatareadtype0x001a() caused by an unbounded strlen on embedded XML plist data. Attackers can supply a crafted FileVault 2 volume with non-NUL-terminated plist data, causing libfvdevolumeopen() to read past the heap block buffer.
Affected Software
Event History
Frequently Asked Questions
What must an attacker provide to trigger the issue?
An attacker must supply a crafted FileVault 2 volume containing embedded XML plist data that is not NUL-terminated. Triggering occurs when the volume is opened through libfvde_volume_open().
What is the practical impact of successful exploitation?
The vulnerability causes a heap out-of-bounds read, which can affect availability. The provided severity vector indicates no confidentiality or integrity impact and requires user interaction.
How can I determine whether my environment is affected?
Systems using libyal libfvde through 20260923 are affected according to the provided data. Review whether applications process or open untrusted FileVault 2 volumes using libfvde.