CVE-2026-119601

Name of the Vulnerable Software and Affected Versions AFFLIB versions prior to 3.7.23

Description A heap out-of-bounds write occurs in the af get page() function. This happens when crafted AFF images are provided with mismatched page and sector sizes, specifically when the page size is larger than and not a multiple of the sector size. This discrepancy causes the sector zero-fill loop to write beyond the allocated buffer, leading to heap memory corruption and the crashing of forensic tools.

Recommendations Update to a version newer than 3.7.22.