PT-2026-31463 · Unknown · The Sleuth Kit

Published 2026-04-08 · Updated 2026-04-17 · CVE-2026-40026

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions The Sleuth Kit versions through 4.14.0

Description The Sleuth Kit contains an out-of-bounds read issue in the ISO9660 filesystem parser. The parse susp() function does not properly validate the len id, len des, and len src fields from the disk image before copying data into a stack buffer. This can lead to reads beyond the allocated memory, and a zero-length SUSP entry can cause an infinite loop.

Recommendations Update to a version newer than 4.14.0.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-40026

OESA-2026-1934

OESA-2026-1935

OESA-2026-1936

OESA-2026-1937

OESA-2026-1938

OESA-2026-1939

Affected Products

The Sleuth Kit

References · 25

• https://github.com/sleuthkit/sleuthkit/commit/a95b0ac21733b059a517aaefa667a17e1bcbdee1 · Patch
• https://mobasi.ai/sentinel · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1938 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1935 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1939 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-40026 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-40026 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1936 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-40026 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1937 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-40024 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-40025 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-40026 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-40026 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1934 · Vendor Advisory