debian/dislocker vulnerabilities

Latest debian/dislocker CVEs

Newest publication first

1. CVE-2026-107634 Dislocker through 0.7.3 Heap Out-of-Bounds Read via BitLocker Metadata Dataset Size

   Published 2026-10-08

   Medium·CVSS 6.9

   Dislocker through 0.7.3 contains a heap out-of-bounds read vulnerability in get_dataset() and get_next_datum() that never validate dataset and datum sizes against the metadata allocation. Attackers can craft a BitLocker volume image with inflated dataset or datum sizes that, when...

2. CVE-2026-107635 Dislocker through 0.7.3 Out-of-Bounds Heap Read via VMK/FVEK Datum Size Underflow

   Published 2026-10-08

   Medium·CVSS 6.9

   Dislocker through 0.7.3 contains an integer underflow vulnerability in get_vmk() and get_fvek() that allows attackers to trigger out-of-bounds heap reads via crafted datum sizes. Attackers can supply a malicious BitLocker volume image with a datum_size smaller than the 36-byte AE...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.