debian/hivex vulnerabilities

Latest debian/hivex CVEs

Newest publication first

1. CVE-2026-120740 Hivex: hivex: denial of service via out-of-bounds read in big-data block processing

   Published 2026-11-02

   Low·CVSS 2.0 EPSS 0.24%

   A flaw was found in hivex. By supplying a specially crafted Windows registry hive file, an attacker can trigger an out-of-bounds memory read when hivex parses registry values containing malformed large data block lists. This issue can cause the application processing the registry...

2. CVE-2021-3622 A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry (hive) file, which would cause hivex to recursively call the _get_children() function,...

   Published 2021-12-23

   Medium·CVSS 4.3 EPSS 5.0%

   A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry (hive) file, which would cause hivex to recursively call the _get_children() function, leading to a stack overflow. The highest threat from this vulnerability is to s...

3. DLA-2656-1 hivex - security update

   Published 2021-05-12

   Unknown

4. CVE-2021-3504 A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivex_open function. An attacker could input a specially crafted Windows Registry...

   Published 2021-05-11

   Medium·CVSS 5.4 EPSS 1.8%

   A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivex_open function. An attacker could input a specially crafted Windows Registry (hive) file which would cause hivex to read memory beyond its normal bounds or...

5. DSA-4913-1 hivex - security update

   Published 2021-05-10

   Unknown

6. CVE-2014-9273 lib/handle.c in Hivex before 1.3.11 allows local users to execute arbitrary code and gain privileges via a small hive files, which triggers an out-of-bounds read or write.

   Published 2014-12-08

   Medium·CVSS 4.6 EPSS 0.63%

   lib/handle.c in Hivex before 1.3.11 allows local users to execute arbitrary code and gain privileges via a small hive files, which triggers an out-of-bounds read or write.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.