{"id":"CVE-2026-40025","title":"The Sleuth Kit through 4.14.0 contains an out-of-bounds read vulnerability in the APFS filesystem keybag parser where the wrapped_key_parser class follows attacker-controlled length fields without bounds checking, causing heap reads past…","summary":"The Sleuth Kit through 4.14.0 contains an out-of-bounds read vulnerability in the APFS filesystem keybag parser where the wrapped_key_parser class follows attacker-controlled length fields without bounds checking, causing heap reads past…","severity":"medium","cvss":4.4,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cwe":["CWE-125"],"vendor":"sleuthkit","product":"the_sleuth_kit","affected":["the_sleuth_kit < 4.15.0"],"patched":["the_sleuth_kit 4.15.0"],"published":"2026-04-08","updated":"2026-07-25","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-40025","references":[{"url":"https://github.com/sleuthkit/sleuthkit/commit/8b9c9e7d493bd68624f3b1a3963edd45c3ff7611","label":"disclosure@vulncheck.com"},{"url":"https://github.com/sleuthkit/sleuthkit/pull/3444","label":"disclosure@vulncheck.com"},{"url":"https://mobasi.ai/sentinel","label":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/sleuth-kit-apfs-keybag-parser-out-of-bounds-read","label":"disclosure@vulncheck.com"}],"tags":["nvd"],"epss":0.00177,"epssPercentile":0.06399,"ingestedAt":"2026-07-26T10:11:58.644Z","slug":"CVE-2026-40025","body":"## Overview\n\nThe Sleuth Kit through 4.14.0 contains an out-of-bounds read vulnerability in the APFS filesystem keybag parser where the wrapped_key_parser class follows attacker-controlled length fields without bounds checking, causing heap reads past the allocated buffer. An attacker can craft a malicious APFS disk image that triggers information disclosure or crashes when processed by any Sleuth Kit tool that parses APFS volumes.\n\n## Affected\n\n- `the_sleuth_kit < 4.15.0`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `the_sleuth_kit 4.15.0`","depth":"sunlit","depthScore":24,"depthScoreParts":{"impact":24.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}