CVE-2026-7179
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
A security vulnerability has been detected in OSPG binwalk up to 2.4.3. The function read_null_terminated_string in the file src/binwalk/plugins/winceextract.py of the WinCE Extraction Plugin is vulnerable to path traversal via manipulation of the argument self.file_name. The attack can only be performed from a local environment. The exploit has been disclosed publicly. The project maintainer confirms the issue but states the project has reached end-of-life (EOL) and recommends migration to binwalk v3.
Risk Assessment
A local attacker can access files outside the intended directory, potentially leading to sensitive data disclosure or privilege escalation. Since the project is no longer supported, no patches are available.
Recommendation
Migrate to binwalk v3, as binwalk version 2.4.3 and earlier are no longer supported and contain an unpatched path traversal vulnerability.
Original NVD description (English source)
A security vulnerability has been detected in OSPG binwalk up to 2.4.3. This vulnerability affects the function read_null_terminated_string of the file src/binwalk/plugins/winceextract.py of the component WinCE Extraction Plugin. Such manipulation of the argument self.file_name leads to path traversal. The attack can only be performed from a local environment. The exploit has been disclosed publicly and may be used. The project maintainer confirms this issue: "I accept the existence of the Path Traversal vulnerability. However, as stated in the Github link, it reached EOL and as a result no actions should be expected." The GitHub repository mentions, that "[u]sers and contributors should migrate to binwalk v3." This vulnerability only affects products that are no longer supported by the maintainer.