{"id":"CVE-2026-77797","aliases":["EUVD-2026-85881","GHSA-4f8c-84gc-p8pv"],"status":"published","title":"Velociraptor Prefetch parser out of bounds","description":"Velociraptor's prefetch library contains an out of bound vulnerability which may cause a crash when parsing certain malformed prefetch files.","severity":{"version":"3.1","score":3.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00105,"percentile":0.0109,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-125","CWE-20"],"published":"2026-09-24T13:49:41Z","modified":"2026-10-28T02:31:10Z","products":[{"vendor":"rapid7","product":"velociraptor"}],"references":[{"url":"http://docs.velociraptor.app/announcements/advisories/cve-2026-7797/","tags":["advisory"]},{"url":"https://github.com/Velocidex/go-prefetch/commit/4bae9796298011598d577b125e0b3db3ee03eb74","tags":["fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77797","tags":["advisory"]},{"url":"http://docs.velociraptor.app/announcements/advisories/cve-2026-7797"},{"url":"https://github.com/advisories/GHSA-4f8c-84gc-p8pv"},{"url":"https://github.com/Velocidex/velociraptor/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/77xxx/CVE-2026-77797.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-77797","title":"Velociraptor Prefetch parser out of bounds","description":"Velociraptor's prefetch library contains an out of bound vulnerability which may cause a crash when parsing certain malformed prefetch files.","status":"published","published":"2026-09-24T13:49:41.379Z","modified":"2026-09-29T10:39:07.525Z","cvss":[{"version":"3.1","score":3.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-20","CWE-125"],"updated_at":"2026-11-02T14:20:15.712761Z"}],"euvd":[{"id":"EUVD-2026-85881","description":"Velociraptor's prefetch library contains an out of bound vulnerability which may cause a crash when parsing certain malformed prefetch files.","status":"published","published":"2026-09-24T13:49:41Z","modified":"2026-09-29T10:39:07Z","cvss":[{"version":"3.1","score":3.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T17:27:52.331616Z"}],"ghsa":[{"id":"GHSA-4f8c-84gc-p8pv","title":"Velociraptor's prefetch library contains an out of bound vulnerability which may cause a crash...","description":"Velociraptor's prefetch library contains an out of bound vulnerability which may cause a crash when parsing certain malformed prefetch files.","status":"published","published":"2026-09-24T15:31:30Z","modified":"2026-09-24T15:31:31Z","cvss":[{"version":"3.1","score":3.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:12:22.2852Z"}],"nvd":[{"id":"CVE-2026-77797","description":"Velociraptor's prefetch library contains an out of bound vulnerability which may cause a crash when parsing certain malformed prefetch files.","status":"published","published":"2026-09-24T14:18:17.247Z","modified":"2026-09-24T21:00:46.893Z","cvss":[{"version":"3.1","score":3.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","level":"low","assessor":"secondary"}],"cwes":["CWE-20","CWE-125"],"updated_at":"2026-11-02T14:12:51.036099Z"}],"osv":[{"id":"CVE-2026-77797","title":"Velociraptor Prefetch parser out of bounds","description":"Velociraptor's prefetch library contains an out of bound vulnerability which may cause a crash when parsing certain malformed prefetch files.","status":"published","published":"2026-09-24T13:49:41.379Z","modified":"2026-10-28T02:31:10.318168333Z","cvss":[{"version":"3.1","score":3.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-125","CWE-20"],"updated_at":"2026-11-02T15:45:17.44708Z"}]}}