{"id":"CVE-2020-0256","aliases":["A-152874864","ALPINE-CVE-2020-0256","ALSA-2022:7700","ASB-A-152874864","BELL-CVE-2020-0256","DEBIAN-CVE-2020-0256","DLA-2549-1","EUVD-2020-1759","GHSA-cj3m-c468-w963","MGASA-2021-0073","RHSA-2022:7700","RHSA-2024:3486","RLSA-2022:7700","UBUNTU-CVE-2020-0256","USN-5262-1","openSUSE-SU-2024:10816-1"],"status":"published","title":"In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds...","description":"In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when inserting a malicious USB device, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-152874864","severity":{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00214,"percentile":0.11763,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2020-08-01T00:00:00Z","modified":"2026-11-09T15:00:02Z","fixes":[{"ecosystem":"Alpine:v3.13","package":"gptfdisk","fixed_in":["1.0.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"gptfdisk","fixed_in":["1.0.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"gptfdisk","fixed_in":["1.0.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"gptfdisk","fixed_in":["1.0.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"gptfdisk","fixed_in":["1.0.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"gptfdisk","fixed_in":["1.0.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"gptfdisk","fixed_in":["1.0.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"gptfdisk","fixed_in":["1.0.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"gptfdisk","fixed_in":["1.0.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"gptfdisk","fixed_in":["1.0.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"gptfdisk","fixed_in":["1.0.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"gptfdisk","fixed_in":["1.0.6-r0"],"sources":["osv"]},{"ecosystem":"Android","package":"platform/external/gptfdisk","fixed_in":["8.0:2020-08-01","8.1:2020-08-01","9:2020-08-01","10:2020-08-01"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"gdisk","fixed_in":["1.0.6-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gdisk","fixed_in":["1.0.6-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gdisk","fixed_in":["1.0.6-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gdisk","fixed_in":["1.0.1-1ubuntu0.1~esm2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.13","package":"gptfdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"gptfdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"gptfdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"gptfdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"gptfdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"gptfdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"gptfdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"gptfdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"gptfdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"gptfdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"gptfdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"gptfdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3-11.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Android","package":"platform/external/gptfdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0:0"},{"fixed":"8.0:2020-08-01"}]}],"versions":["8.0"]},{"source":"osv","ecosystem":"Android","package":"platform/external/gptfdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2020-08-01"}]}],"versions":["8.1"]},{"source":"osv","ecosystem":"Android","package":"platform/external/gptfdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2020-08-01"}]}],"versions":["9"]},{"source":"osv","ecosystem":"Android","package":"platform/external/gptfdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2020-08-01"}]}],"versions":["10"]},{"source":"osv","ecosystem":"Debian:12","package":"gdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"gdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"gdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"gdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-1+deb9u1"}]}],"versions":["1.0.1-1"],"bundled":2},{"source":"osv","ecosystem":"Mageia:7","package":"gdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-1.mga7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-11.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gdisk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-11.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gdisk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-11.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-9.el8_6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gdisk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-9.el8_6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gdisk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-9.el8_6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-11.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"gdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8.7-1","0.8.8-1build1","0.8.8-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-1ubuntu0.1~esm2"}]}],"versions":["1.0.0-3","1.0.1-1","1.0.1-1build1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"gdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.1-1build1","1.0.3-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"gdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.4-3","1.0.5-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"gdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.8-1","1.0.8-3","1.0.8-4","1.0.8-4build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-1ubuntu0.1~esm2"}]}],"versions":["1.0.0-3","1.0.1-1","1.0.1-1build1"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"gptfdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.8-1.2"}]}],"bundled":2}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"google","product":"android"}],"references":[{"url":"https://source.android.com/security/bulletin/2020-08-01","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/02/msg00010.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-0256","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-cj3m-c468-w963"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-0256","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7700","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-0256","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-0308","tags":["report"]},{"url":"https://bugzilla.redhat.com/2051939","tags":["report"]},{"url":"https://bugzilla.redhat.com/2051943","tags":["report"]},{"url":"https://bugzilla.redhat.com/2065205","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-7700.html","tags":["advisory"]},{"url":"https://android.googlesource.com/platform/external/gptfdisk/+/7ffd0a26064cf25c0922f2bab511e4b4e8149083","tags":["fix","report"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2020-0256","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-0256","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0073.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=28206","tags":["report"]},{"url":"https://sourceforge.net/p/gptfdisk/code/ci/6180deb472c302c47f4d4acff8f2123d10824364/tree/NEWS","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2051939","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2051943","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2065205","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7700.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-0256","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-0308","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-0308","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3486","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3486.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:7700","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-0256","tags":["report"]},{"url":"https://sourceforge.net/p/gptfdisk/code/ci/81c8bbee46ad6ebacf72eae70ba5147f376205a4/","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5262-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-0308","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2020-0256","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-0308","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-0256","description":"In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when inserting a malicious USB device, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-152874864","status":"published","published":"2020-08-11T19:31:42Z","modified":"2024-08-04T05:55:12.551Z","updated_at":"2026-11-02T14:35:59.434367Z"}],"euvd":[{"id":"EUVD-2020-1759","description":"In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when inserting a malicious USB device, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-152874864","status":"published","published":"2020-08-11T19:31:42Z","modified":"2024-08-04T05:55:12Z","updated_at":"2026-11-03T03:08:20.772437Z"}],"ghsa":[{"id":"GHSA-cj3m-c468-w963","title":"In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds...","description":"In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when inserting a malicious USB device, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-152874864","status":"published","published":"2022-05-24T17:25:16Z","modified":"2023-01-29T05:03:30Z","cwes":["CWE-787"],"updated_at":"2026-11-02T14:45:19.964025Z"}],"nvd":[{"id":"CVE-2020-0256","description":"In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when inserting a malicious USB device, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-152874864","status":"published","published":"2020-08-11T20:15:12.777Z","modified":"2026-06-17T02:45:30.053Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:06:10.994748Z"}],"osv":[{"id":"ALPINE-CVE-2020-0256","description":"In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when inserting a malicious USB device, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-152874864","status":"published","published":"2020-08-11T20:15:12.777Z","modified":"2026-10-26T11:17:55.094924371Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:27:48.11886Z"},{"id":"BELL-CVE-2020-0256","title":"CVE-2020-0256 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:16:24.966672Z","modified":"2026-01-26T09:47:23.801098Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:15.340685Z"},{"id":"CVE-2020-0256","description":"In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when inserting a malicious USB device, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-152874864","status":"published","published":"2020-08-11T20:15:12.777Z","modified":"2026-04-16T04:39:18.865722572Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:13.492058Z"},{"id":"DEBIAN-CVE-2020-0256","description":"In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when inserting a malicious USB device, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-152874864","status":"published","published":"2020-08-11T20:15:12.777Z","modified":"2026-10-26T12:00:05.81910268Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:32.57265Z"},{"id":"RHSA-2022:7700","title":"Red Hat Security Advisory: gdisk security update","status":"published","published":"2024-09-16T08:03:43Z","modified":"2025-11-22T12:40:37Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2024:3486","title":"Red Hat Security Advisory: gdisk security update","status":"published","published":"2024-09-16T08:03:50Z","modified":"2026-03-18T11:35:13.520266Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RLSA-2022:7700","title":"Moderate: gdisk security update","description":"The gdisk packages provide the gdisk partitioning utility for GUID Partition Table (GPT) disks. The utility features a command-line interface similar to fdisk, direct manipulation of partition table structures, recovery tools to deal with corrupt partition tables, and the ability to convert Master Boot Record (MBR) disks to the GPT format.\n\nSecurity Fix(es):\n\n* gdisk: possible out-of-bounds-write in LoadPartitionTable of gpt.cc (CVE-2020-0256)\n\n* gdisk: possible out-of-bounds-write in ReadLogicalParts of basicmbr.cc (CVE-2021-0308)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.7 Release Notes linked from the References section.","status":"published","published":"2022-11-08T06:26:43Z","modified":"2026-02-05T08:45:19.979207Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2020-0256","description":"In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when inserting a malicious USB device, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-152874864","status":"published","published":"2020-08-11T20:15:00Z","modified":"2026-02-04T03:24:26.095558Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:22.212782Z"},{"id":"ALSA-2022:7700","title":"Moderate: gdisk security update","description":"The gdisk packages provide the gdisk partitioning utility for GUID Partition Table (GPT) disks. The utility features a command-line interface similar to fdisk, direct manipulation of partition table structures, recovery tools to deal with corrupt partition tables, and the ability to convert Master Boot Record (MBR) disks to the GPT format.\n\nSecurity Fix(es):\n\n* gdisk: possible out-of-bounds-write in LoadPartitionTable of gpt.cc (CVE-2020-0256)\n* gdisk: possible out-of-bounds-write in ReadLogicalParts of basicmbr.cc (CVE-2021-0308)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-11-08T00:00:00Z","modified":"2026-11-09T15:00:02.639213409Z","updated_at":"2026-11-09T15:32:21.787252Z"},{"id":"ASB-A-152874864","description":"In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when inserting a malicious USB device, with no additional execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2020-08-01T00:00:00Z","modified":"2026-11-06T16:30:33.305097686Z","updated_at":"2026-11-06T16:59:08.777969Z"},{"id":"DLA-2549-1","title":"gdisk - security update","status":"published","published":"2021-02-08T00:00:00Z","modified":"2026-03-09T01:20:10.773826Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"MGASA-2021-0073","title":"Updated gdisk package fixes security vulnerabilities","description":"A bug that could cause segfault if GPT header claimed partition entries are\noversized (CVE-2020-0256).\n\nA bug that could cause a crash if a badly-formatted MBR disk was read\n(CVE-2021-0308).\n\nThe gdisk package has been updated to version 1.0.6, fixing these issues and\nseveral other bugs.  See the upstream NEWS file for details.\n","status":"published","published":"2021-02-06T18:20:41Z","modified":"2026-04-16T04:44:46.536009908Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2024:10816-1","title":"gptfdisk-1.0.8-1.2 on GA media","description":"These are all security issues fixed in the gptfdisk-1.0.8-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:20:15.69803Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"USN-5262-1","title":"gdisk vulnerabilities","description":"\nThe potential for an out of bounds write due to a missing bounds\ncheck was discovered to impact the sgdisk utility of GPT fdisk. \nExploitation requires the use of a maliciously formatted storage \ndevice and could cause sgdisk to crash as well as possibly \nallow for local privilege escalation.\n\n","status":"published","published":"2022-02-03T20:32:00Z","modified":"2026-06-25T13:30:14.49140096Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}