3.6

CVE-2026-77797

Velociraptor Prefetch parser out of bounds

Velociraptor's prefetch library contains an out of bound vulnerability which may cause a crash when parsing certain malformed prefetch files.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerRapid7
≫
Produkt Velociraptor
Default Statusunaffected
Version 0
Version < 0.77.3
Status affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.11% 0.01
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Rapid7 3.6 1.8 1.4
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://docs.velociraptor.app/announcements/advisories/cve-2026-7797/
https://github.com/Velocidex/go-prefetch/commit/4bae9796298011598d577b125e0b3db3ee03eb74