[ Vendor · 2 CVEs ]
The Sleuth Kit
CVEs affecting The Sleuth Kit published in the last 30 days, plus any The Sleuth Kit CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-120453 | 2 Nov 2026 | CVSS 3.3 | The Sleuth KitThe Sleuth Kit through 4.15.0 contains a heap out-of-bounds read vulnerability in hfs_load_extended_attrs() in tsk/fs/hfs.c that reads the decmpfs… | |
| CVE-2026-120454 | 2 Nov 2026 | CVSS 5.5 | The Sleuth KitThe Sleuth Kit through 4.15.0 contains a NULL pointer dereference vulnerability in decmpfs_decompress_lzvn_attr() that allows attackers to crash the… |