A flaw was found in libhivex. A stack overflow occurs as the children of each listed node grows. This causes the getchildren function to continue calling until it eventually overflows the stack and causes the program to crash.

References:

https://github.com/libguestfs/hivex/commit/771728218dac2fbf6997a7e53225e75a4c6b7255 https://listman.redhat.com/archives/libguestfs/2021-August/msg00002.html

A flaw was found in libhivex. It's possible to provide a large length value for a node which can read past the end of the file leading to read of arbitrary memory and other potential consequences.