{"id":"CVE-2026-89085","aliases":["DEBIAN-CVE-2026-89085","EUVD-2026-103202","GHSA-j946-9w8f-v6hg","MGASA-2026-0512","SUSE-SU-2026:5090-1","SUSE-SU-2026:5117-1","UBUNTU-CVE-2026-89085","openSUSE-SU-2026:11924-1"],"status":"published","title":"Parted: parted: heap-based buffer overflow via crafted fat32 filesystem image","description":"A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image, resulting in an application crash leading to a Denial of Service (DoS) or potential memory corruption.","severity":{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00206,"percentile":0.1063,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2026-09-29T00:00:00Z","modified":"2026-11-06T02:17:55Z","fixes":[{"ecosystem":"Debian:14","package":"parted","fixed_in":["3.8-2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"parted","fixed_in":["3.8-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.5-3","3.6-1","3.6-2","3.6-3","3.6-3.1","3.6-3.1~exp1","3.6-4","3.6-5","3.6-5+hurd.1","3.6-6","3.7-1","3.8-2"]},{"source":"osv","ecosystem":"Debian:13","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6-5","3.6-5+hurd.1","3.6-6","3.7-1","3.8-2"]},{"source":"osv","ecosystem":"Debian:14","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8-2"}]}],"versions":["3.6-5","3.6-5+hurd.1","3.6-6","3.7-1"]},{"source":"osv","ecosystem":"Mageia:10","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6-2.1.mga10"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-37.29.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-37.29.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150300.21.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150300.21.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150300.21.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150300.21.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150300.21.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150300.21.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150300.21.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150300.21.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150300.21.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150300.21.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150300.21.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150300.21.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150300.21.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150300.21.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3-16ubuntu1","2.3-16ubuntu2","2.3-16ubuntu3","2.3-17","2.3-18","2.3-19","2.3-19ubuntu1","2.3-19ubuntu1.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.2-7ubuntu1","3.2-12","3.2-13","3.2-14","3.2-14ubuntu1","3.2-15","3.2-15ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.2-18","3.2-20","3.2-20ubuntu0.1","3.2-20ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.2-26","3.3-1","3.3-3","3.3-4","3.3-4ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.4-1","3.4-1build1","3.4-2","3.4-2build1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6-3","3.6-3.1build2","3.6-4build1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6-6","3.7-1","3.8-2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6-5","3.6-6"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8-1.1"}]}]}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-89085","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2466034","tags":["issue-tracking","x_refsource_REDHAT","exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89085"},{"url":"https://github.com/advisories/GHSA-j946-9w8f-v6hg"},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-89085","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0512.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=36423","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2K3TJ47ZMRSILG3IESTHGOOFEBBL5HS4/","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/6UHEOPPKU525Y6OAUPMV2W65RVVSAQ4V/","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20265090-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1286017","tags":["report"]},{"url":"https://bugzilla.suse.com/1286018","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89088","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20265117-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-89085","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-89085","tags":["report"]},{"url":"https://alioth-lists.debian.net/pipermail/parted-devel/2026-September/006032.html","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-89085","title":"Parted: parted: heap-based buffer overflow via crafted fat32 filesystem image","description":"A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image, resulting in an application crash leading to a Denial of Service (DoS) or potential memory corruption.","status":"published","published":"2026-10-16T23:04:28.673Z","modified":"2026-11-06T01:13:40.44Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-787"],"updated_at":"2026-11-06T02:55:55.947181Z"}],"euvd":[{"id":"EUVD-2026-103202","description":"A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image, resulting in an application crash leading to a Denial of Service (DoS) or potential memory corruption.","status":"published","published":"2026-10-16T23:04:28Z","modified":"2026-11-06T01:13:40Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"medium"}],"updated_at":"2026-11-06T02:02:53.341523Z"}],"ghsa":[{"id":"GHSA-j946-9w8f-v6hg","title":"A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially...","description":"A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image, resulting in an application crash leading to a Denial of Service (DoS) or potential memory corruption.","status":"published","published":"2026-10-17T00:31:19Z","modified":"2026-10-17T00:31:23Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"medium"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T15:13:52.91817Z"}],"nvd":[{"id":"CVE-2026-89085","description":"A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image, resulting in an application crash leading to a Denial of Service (DoS) or potential memory corruption.","status":"published","published":"2026-10-16T23:17:02.553Z","modified":"2026-11-06T02:17:55.69Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-787"],"updated_at":"2026-11-06T06:59:06.002832Z"}],"osv":[{"id":"DEBIAN-CVE-2026-89085","description":"A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image, resulting in an application crash leading to a Denial of Service (DoS) or potential memory corruption.","status":"published","published":"2026-10-16T23:17:02.553Z","modified":"2026-10-23T18:04:42.763519601Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:46:05.506112Z"},{"id":"UBUNTU-CVE-2026-89085","description":"A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image, resulting in an application crash leading to a Denial of Service (DoS) or potential memory corruption.","status":"published","published":"2026-10-16T23:17:00Z","modified":"2026-10-28T20:17:36.113940612Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T16:57:24.828975Z"},{"id":"MGASA-2026-0512","title":"Updated parted package fixes security vulnerabilities","description":"A heap-based buffer overflow can occur when processing a specially\ncrafted FAT32 filesystem due to an integer calculation error during\nbuffer allocation. A local attacker could exploit this by enticing a\nuser or automated service to open a malicious filesystem image,\nresulting in an application crash leading to a Denial of Service (DoS)\nor potential memory corruption.\nA heap-based buffer overflow exists in libparted's file system resizing\nlogic when handling FAT16 volumes. By convincing a user or administrator\nto resize a specially crafted FAT16 file system image with malformed\ndirectory metadata, an attacker can trigger an oversized read into a\nfixed-size memory buffer. This issue causes memory corruption, resulting\nin an application crash and a denial of service (DoS).\n","status":"published","published":"2026-10-17T03:21:49Z","modified":"2026-10-17T03:30:03.782633533Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:11924-1","title":"libparted-fs-resize0-3.8-1.1 on GA media","description":"These are all security issues fixed in the libparted-fs-resize0-3.8-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-09-29T00:00:00Z","modified":"2026-09-30T18:23:14.478707021Z","updated_at":"2026-11-02T16:58:40.245664Z"},{"id":"SUSE-SU-2026:5090-1","title":"Security update for parted","description":"This update for parted fixes the following issues:\n\n- CVE-2026-89085: heap-based buffer overflow via crafted FAT32 filesystem image (bsc#1286017).\n- CVE-2026-89088: denial of service via heap buffer overflow during FAT16 resize (bsc#1286018).\n","status":"published","published":"2026-11-03T15:26:05Z","modified":"2026-11-04T14:15:13.331324415Z","updated_at":"2026-11-04T14:31:33.296313Z"},{"id":"SUSE-SU-2026:5117-1","title":"Security update for parted","description":"This update for parted fixes the following issues:\n\n- CVE-2026-89085: heap-based buffer overflow via crafted FAT32 filesystem image (bsc#1286017).\n- CVE-2026-89088: denial of service via heap buffer overflow during FAT16 resize (bsc#1286018).\n","status":"published","published":"2026-11-05T11:59:14Z","modified":"2026-11-05T19:00:04.164432317Z","updated_at":"2026-11-05T19:27:36.688147Z"}]}}