CVE-2026-111133
Last modified
CVE-2026-111133 is a medium-severity vulnerability rated 6.1/10 on the CVSS scale. libfsapfs through 20260921 contains an integer underflow in libfsapfs_key_encrypted_key_read_data() that allows attackers to trigger heap out-of-bounds reads via crafted KEK attributes. Attackers can supply a crafted encrypted APFS image with malformed HMAC or wrapped KEK attribute lengths to crash fsapfsinfo, pyfsapfs, dfVFS or plaso and read adjacent heap memory before password checks.. EPSS estimates a 0.20% chance of exploitation in the next 30 days.
Description
libfsapfs through 20260921 contains an integer underflow in libfsapfs_key_encrypted_key_read_data() that allows attackers to trigger heap out-of-bounds reads via crafted KEK attributes. Attackers can supply a crafted encrypted APFS image with malformed HMAC or wrapped KEK attribute lengths to crash fsapfsinfo, pyfsapfs, dfVFS or plaso and read adjacent heap memory before password checks.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| libyal | libfsapfs | <= 20260921 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-111133?
How severe is CVE-2026-111133?
How do I fix CVE-2026-111133?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-111128Assimp through 6.0.5 contains a NULL pointer dereference vul…5.5
- CVE-2026-111129Open Asset Import Library (assimp) through 6.0.5 contains a …5.5
- CVE-2026-11113Insufficient validation of untrusted input in ANGLE in Googl…9.6
- CVE-2026-111130OpenSlide through 4.0.1 contains a heap out-of-bounds read v…6.1
- CVE-2026-111131libxmp through 4.7.4 contains an off-by-one stack out-of-bou…6.1
- CVE-2026-111132GNOME libgxps through 0.3.2 contains a heap out-of-bounds re…6.1
- CVE-2026-111134libfwsi through 20260522 contains a heap out-of-bounds read …6.1
- CVE-2026-111135libfwsi through 20260522 contains a heap out-of-bounds read …6.1
- CVE-2026-111136libInstPatch through 1.1.7 contains a heap out-of-bounds wri…6.1
- CVE-2026-111137libsmi through 0.5.0 contains an out-of-bounds write vulnera…6.1
- CVE-2026-111138NetSurf libnsbmp through 0.1.7 contains an out-of-bounds rea…5.5
- CVE-2026-111139NetSurf libnsbmp through 0.1.7 contains an out-of-bounds rea…5.5
Are you affected by CVE-2026-111133?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST