CVE-2026-120740
LOW
INFO
Priority: 0.00
BB Relevance:
29/100
Published: 2026-11-02
Modified: 2026-11-02
First seen: 2026-11-02
Status: active
Attack Surface
Network
CVSS Vector Breakdown
AV:
Network
AC:
High
PR:
High
UI:
Required
S:
Unchanged
C:
None
I:
None
A:
Low
Description
A flaw was found in hivex. By supplying a specially crafted Windows registry hive file, an attacker can trigger an out-of-bounds memory read when hivex parses registry values containing malformed large data block lists. This issue can cause the application processing the registry file to crash, resulting in a Denial of Service (DoS).
Weakness Classification (1)
References & Advisories (2)
vdb-entry
x_refsource_REDHAT
issue-tracking
x_refsource_REDHAT