UBUNTU-CVE-2026-120740: Low severity ubuntu/hivex vulnerability
A flaw was found in hivex. By supplying a specially crafted Windows registry hive file, an attacker can trigger an out-of-bounds memory read when hivex parses registry values containing malformed large data block lists. This issue can cause the application processing the registry file to crash, resulting in a Denial of Service (DoS).
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems are exposed when an application using hivex parses Windows registry hive files supplied by an attacker. The impact described is a crash of the application processing the malformed hive file.
What does an attacker need to exploit it?
An attacker must provide a specially crafted Windows registry hive containing registry values with malformed large data block lists. Exploitation also requires the affected application to parse that hive file.
What is the practical impact?
The documented impact is denial of service: hivex can perform an out-of-bounds memory read and cause the application handling the registry file to crash. No confidentiality or integrity impact is indicated by the provided severity vector.