CVE-2026-107634 — Dislocker through 0.7.3 Heap Out-of-Bounds Read via BitLocker Metadata Dataset Size
Dislocker through 0.7.3 contains a heap out-of-bounds read vulnerability in get_dataset() and get_next_datum() that never validate dataset and datum sizes against the metadata a…
Published: 2026-10-08 · CVSS: 6.9 · CVSS 4.0
Dislocker through 0.7.3 contains a heap out-of-bounds read vulnerability in get_dataset() and get_next_datum() that never validate dataset and datum sizes against the metadata allocation. Attackers can craft a BitLocker volume image with inflated dataset or datum sizes that, when opened or mounted, crashes dislocker or discloses adjacent heap memory.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7