UBUNTU-CVE-2026-116729: Medium severity ubuntu/libfvde vulnerability
libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvdeencryptedmetadatareadtype0x001a() caused by an unbounded strlen on embedded XML plist data. Attackers can supply a crafted FileVault 2 volume with non-NUL-terminated plist data, causing libfvdevolumeopen() to read past the heap block buffer.
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
An attacker needs to provide a crafted FileVault 2 volume containing non-NUL-terminated XML plist data and have it opened through libfvde_volume_open(). The CVSS vector indicates local attack access and user interaction are required, while no privileges are required.
What is the expected security impact if exploitation succeeds?
The reported impact is a heap out-of-bounds read that can cause a low availability impact. The supplied CVSS vector indicates no confidentiality or integrity impact.