Description
libphdi through 20260902 contains a heap out-of-bounds read vulnerability in libphdi_data_files_get_extent_data_file_path that uses the directory prefix length instead of the basename length. Attackers can supply a crafted Parallels disk image descriptor with a long directory prefix and short basename to crash the process or expose adjacent heap memory.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
libyal libphdi
Default version status: unaffected
0 to ≤ 20260902affected
pkg:github/libyal/libphdiReferences
- https://github.com/libyal/libphdi/issues/6 ↗
- https://github.com/libyal/libphdi ↗
- https://github.com/libyal/libphdi/commit/61e3e1f6b4c5e15ce827b11858ba51f0dba254e3 ↗
- https://github.com/libyal/libphdi/blob/20260902/libphdi/libphdi_data_files.c#L890-L907 ↗
- https://hackmd.io/@haindpwn/libphdi-extent-data-file-path-heap-oob-read ↗
- https://www.vulncheck.com/advisories/libphdi-through-20260902-heap-out-of-bounds-read-via-extent-data-file-path ↗