PT-2026-31462 · Unknown · The Sleuth Kit

Mobasi · Published 2026-04-08 · Updated 2026-04-17 · CVE-2026-40025

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

Name of the Vulnerable Software and Affected Versions The Sleuth Kit versions through 4.14.0

Description The Sleuth Kit contains a flaw in the APFS filesystem keybag parser. The wrapped key parser class does not properly validate length fields, leading to potential out-of-bounds reads when processing attacker-controlled data. This can result in information disclosure or application crashes when handling malicious APFS disk images.

Recommendations Update to a version beyond 4.14.0.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-40025

OESA-2026-1936

OESA-2026-1937

OESA-2026-1938

OESA-2026-1939

Affected Products

The Sleuth Kit

References · 21

• https://github.com/sleuthkit/sleuthkit/commit/8b9c9e7d493bd68624f3b1a3963edd45c3ff7611 · Patch
• https://cve.org/CVERecord?id=CVE-2026-40025 · Security Note
• https://osv.dev/vulnerability/OESA-2026-1937 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-40025 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-40025 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1939 · Vendor Advisory
• https://mobasi.ai/sentinel · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-40026 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-40025 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-40024 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-40025 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1938 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-40025 · Security Note
• https://osv.dev/vulnerability/OESA-2026-1936 · Vendor Advisory
• https://github.com/sleuthkit/sleuthkit/pull/3444 · Note