CVE-2026-123269

Low

Description

A vulnerability was detected in libyal libvmdk. Affected by this vulnerability is the function libvmdk_descriptor_file_read_header of the file libvmdk/libvmdk_descriptor_file.c of the component Descriptor File Parser. The manipulation results in out-of-bounds read. The attack must be initiated from a local position. The exploit is now public and may be used. The patch is identified as 175d3fc0a0b961f362f16e7560a6169d7213e16b. It is best practice to apply a patch to resolve this issue.

SeverityLow

CVSS3.3

Exploit probability—

ProductLibyal Libvmdk

PublishedNov 6, 2026

First seenNov 6, 2026

Weakness typeCWE-119Memory buffer bounds error CWE-125Out-of-bounds read

How to fix

Patches

github.com/libyal/libvmdk/commit/175d3fc0a0b961f362f16e7560a6169d7213e16b

Affected products

Product	Affected versions	Fixed in
libyal libvmdk	No range specified	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.