cve/2018/CVE-2018-11737.md

CVE-2018-11737

Description

An issue was discovered in libtskfs.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was found in the function ntfs_fix_idxrec in tsk/fs/ntfs_dent.cpp which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service.

POC

Reference

• https://github.com/sleuthkit/sleuthkit/issues/1266

Github

No PoCs found on GitHub currently.