CVE-2026-116729
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvde_encrypted_metadata_read_type_0x001a() caused by an unbounded strlen on embedded XML plist data. Attackers can supply a crafted FileVault 2 volume with non-NUL-terminated plist data, causing libfvde_volume_open() to read past the heap block buffer.
Risk Assessment
Can lead to application crashes or memory data disclosure when opening a crafted FileVault 2 volume. Affects forensic tools and systems processing untrusted disk images.
Recommendation
Upgrade libfvde to a patched version or apply the vendor fix. Avoid opening untrusted FileVault 2 volumes until updated.
Other vulnerabilities in libfvde
Original NVD description (English source)
libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvde_encrypted_metadata_read_type_0x001a() caused by an unbounded strlen on embedded XML plist data. Attackers can supply a crafted FileVault 2 volume with non-NUL-terminated plist data, causing libfvde_volume_open() to read past the heap block buffer.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS