CVE-2026-120740
Hivex: hivex: denial of service via out-of-bounds read in big-data block processing
A flaw was found in hivex. By supplying a specially crafted Windows registry hive file, an attacker can trigger an out-of-bounds memory read when hivex parses registry values containing malformed large data block lists. This issue can cause the application processing the registry file to crash, resulting in a Denial of Service (DoS).
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- High
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Hivex: hivex: denial of service via out-of-bounds read in big-data block processing
A flaw was found in hivex. By supplying a specially crafted Windows registry hive file, an attacker can trigger an out-of-bounds memory read when hivex parses registry values containing malformed large data block lists. This issue can cause the application processing the registry file to crash, resulting in a Denial of Service (DoS).
- Record
CVE-2026-120740- CVSS 3.1
- 2.0 Low
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:L - Weakness
- CWE-125
- Updated
- 2026-11-07
EUVDEUVD-2026-115639
A flaw was found in hivex. By supplying a specially crafted Windows registry hive file, an attacker can trigger an out-of-bounds memory read when hivex parses registry values containing malformed large data block lists. This issue can cause the application processing the registry file to crash, resulting in a Denial of Service (DoS).
- Record
EUVD-2026-115639- CVSS 3.1
- 2.0 Low
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-07
GitHub AdvisoriesGHSA-r95m-g8f5-qf3h
A flaw was found in hivex. By supplying a specially crafted Windows registry hive file, an...
A flaw was found in hivex. By supplying a specially crafted Windows registry hive file, an attacker can trigger an out-of-bounds memory read when hivex parses registry values containing malformed large data block lists. This issue can cause the application processing the registry file to crash, resulting in a Denial of Service (DoS).
- Record
GHSA-r95m-g8f5-qf3h- CVSS 3.1
- 2.0 Low
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:L - Weakness
- CWE-125
- Updated
- 2026-11-03
NVD
A flaw was found in hivex. By supplying a specially crafted Windows registry hive file, an attacker can trigger an out-of-bounds memory read when hivex parses registry values containing malformed large data block lists. This issue can cause the application processing the registry file to crash, resulting in a Denial of Service (DoS).
- Record
CVE-2026-120740- CVSS 3.1
- 2.0 Low
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:L - Weakness
- CWE-125
- Updated
- 2026-11-07
OSVDEBIAN-CVE-2026-120740
A flaw was found in hivex. By supplying a specially crafted Windows registry hive file, an attacker can trigger an out-of-bounds memory read when hivex parses registry values containing malformed large data block lists. This issue can cause the application processing the registry file to crash, resulting in a Denial of Service (DoS).
- Record
DEBIAN-CVE-2026-120740- CVSS 3.1
- 2.0 Low
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-07
OSVUBUNTU-CVE-2026-120740
A flaw was found in hivex. By supplying a specially crafted Windows registry hive file, an attacker can trigger an out-of-bounds memory read when hivex parses registry values containing malformed large data block lists. This issue can cause the application processing the registry file to crash, resulting in a Denial of Service (DoS).
- Record
UBUNTU-CVE-2026-120740- CVSS 3.1
- 2.0 Low
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-05
OSVAZL-112744 No score
CVE-2026-120740 affecting package hivex 1.3.23-2
A flaw was found in hivex. By supplying a specially crafted Windows registry hive file, an attacker can trigger an out-of-bounds memory read when hivex parses registry values containing malformed large data block lists. This issue can cause the application processing the registry file to crash, resulting in a Denial of Service (DoS).
- Record
AZL-112744- Updated
- 2026-11-07
OSVopenSUSE-SU-2026:12458-1 No score
hivex-1.3.24-4.1 on GA media
These are all security issues fixed in the hivex-1.3.24-4.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:12458-1- Updated
- 2026-11-07
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
hivexAzure Linux:3 |
through 1.3.23-2 | None known |
hivexDebian:12 |
All versions, plus listed versions 1.3.23-11.3.23-21.3.24-11.3.24-21.3.24-2.11.3.24-3 |
None known |
hivexDebian:13 |
All versions, plus listed versions 1.3.24-11.3.24-21.3.24-2.11.3.24-3 |
None known |
hivexDebian:14 |
All versions, plus listed versions 1.3.24-11.3.24-21.3.24-2.11.3.24-3 |
None known |
hivexUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.3.11-1build11.3.12-11.3.13-11.3.13-1build11.3.13-1build21.3.13-1build31.3.13-1ubuntu0.1~esm1 |
None known |
hivexUbuntu:18.04:LTS |
All versions, plus listed versions 1.3.14-1build41.3.14-3build11.3.14-41.3.14-4build11.3.15-11.3.15-1ubuntu0.1 |
None known |
hivexUbuntu:20.04:LTS |
All versions, plus listed versions 1.3.18-11.3.18-1build11.3.18-21.3.18-2build11.3.18-2build21.3.18-2ubuntu0.1 |
None known |
hivexUbuntu:22.04:LTS |
All versions, plus listed versions 1.3.19-1ubuntu31.3.21-1ubuntu11.3.21-1ubuntu41.3.21-1ubuntu5 |
None known |
hivexUbuntu:24.04:LTS |
All versions, plus listed versions 1.3.23-1build21.3.23-1build31.3.23-1build41.3.23-1build61.3.23-1build7 |
None known |
hivexUbuntu:26.10 |
All versions, plus listed versions 1.3.24-2.1build21.3.24-3build0.11.3.24-3build1 |
None known |
hivexUbuntu:26.04:LTS |
All versions, plus listed versions 1.3.24-1build61.3.24-1build71.3.24-21.3.24-2build11.3.24-2.11.3.24-2.1build11.3.24-2.1build2 |
None known |
hivexopenSUSE:Tumbleweed |
before 1.3.24-4.1 | 1.3.24-4.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, aliases, facts, references | OSV | |
| affected, aliases, references | CVE List, EUVD, NVD, OSV | |
| affected, aliases, facts, references | OSV | |
| affected, aliases, references | OSV | |
| aliases, published | EUVD | |
| aliases, references | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-120740 is a low vulnerability (CVSS 2.0) in Red Hat Enterprise Linux 10, published November 2, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 14th percentile. Fixed in hivex 1.3.24-4.1.
References
access.redhat.com/security/cve/CVE-2026-120740
bugzilla.redhat.com/show_bug.cgi?id=2565405
nvd.nist.gov/vuln/detail/CVE-2026-120740
github.com/advisories/GHSA-r95m-g8f5-qf3h
security-tracker.debian.org/tracker/CVE-2026-120740
ubuntu.com/security/CVE-2026-120740
cve.org/CVERecord?id=CVE-2026-120740
suse.com/security/cve/CVE-2026-120740