CVE-2026-89085Medium· 6.6▾ SunlitA flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 36.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image, resulting in an application crash leading to a Denial of Service (DoS) or potential memory corruption.
parted (all versions)partedparted (all versions)parted (all versions)parted (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-89088Medium· 5.5Parted: parted: denial of service via heap buffer overflow during fat16 resize
CVE-2026-105958High· 7.5Spice-server: spice: heap oob read/write via unchecked migration data offsets
CVE-2026-86856Medium· 6.5A flaw was found in the DPDK nfp vDPA driver
CVE-2026-86849Medium· 6.5A flaw was found in DPDK lib/vhost vhost-crypto
CVE-2026-86846Medium· 6.5A flaw was found in DPDK lib/vhost vhost-crypto
CVE-2026-86565High· 8.2A flaw was found in DPDK lib/vhost