CVE-2026-124743

A flaw was found in BusyBox. When processing filesystem metadata, the volume identification component does not properly validate header values in HFS+ filesystems. An attacker able to attach a storage device or supply a specially crafted filesystem image can trigger an application crash, resulting in a Denial of Service (DoS) and preventing device resolution.

• CWE-369

• https://access.redhat.com/security/cve/CVE-2026-124743
• https://bugzilla.redhat.com/show_bug.cgi?id=2571624

Published

Nov 11, 2026

Last Modified

Nov 13, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-124737A flaw was found in BusyBox. When the TFTP (Trivial File Tra…7.5
• CVE-2026-124738A flaw was found in BusyBox. When the HTTP daemon (httpd) ha…5.3
• CVE-2026-124739A flaw was found in BusyBox. When the httpd web server proce…7.5
• CVE-2026-124740A flaw was found in BusyBox's udhcpc6 DHCPv6 client. A malic…4.3
• CVE-2026-124741A flaw was found in BusyBox. The udhcpc6 DHCPv6 client does …7.6
• CVE-2026-124742A flaw was found in BusyBox. The volume identification compo…5.5
• CVE-2026-124744A flaw was found in BusyBox. When extracting files using the…6.3
• CVE-2026-124745A flaw was found in BusyBox. When extracting an archive, the…6.3
• CVE-2026-124746A flaw was found in BusyBox. An integer overflow occurs in t…5.5
• CVE-2026-124747A flaw was found in BusyBox. When resuming a download over F…7.5
• CVE-2026-12475Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2026-124752Improper Neutralization of Input During Web Page Generation …6.5