CVE-2026-123269: libyal libvmdk Descriptor File libvmdk_descriptor_file.c libvmdk_descriptor_file_read_header out-of-bounds

A vulnerability was detected in libyal libvmdk. Affected by this vulnerability is the function libvmdkdescriptorfilereadheader of the file libvmdk/libvmdkdescriptorfile.c of the component Descriptor File Parser. The manipulation results in out-of-bounds read. The attack must be initiated from a local position. The exploit is now public and may be used. The patch is identified as 175d3fc0a0b961f362f16e7560a6169d7213e16b. It is best practice to apply a patch to resolve this issue.