A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image, resulting in an application crash leading to a Denial of Service (DoS) or potential memory corruption.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 3
- StatusAwaiting Analysis → PublishedNVD modified 2026-10-19 15:08
- StatusReceived → Awaiting AnalysisNVD modified 2026-10-19 21:03
- First seenCVSS 6.6NVD modified 2026-10-19 16:17
Affected (CPE criteria) 0
NVD has not attached CPE configurations yet.