Skip to content
Noroxi

sleuthkit records

19 published records for vendor sleuthkit.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
42.1%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 23
  6. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

19 records
  • CVE-2018-1000838
    41Plan

    autopsy version <= 4.9.0 contains a XML External Entity (XXE) vulnerability in CaseMetadata XML Parser that can result in Disclosure of conf

    CriticalCVSS 10.0No exploitEPSS 3%

    sleuthkit · autopsyDec 20, 2018

  • CVE-2020-10232
    40Plan

    In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing log

    CriticalCVSS 9.8No exploitEPSS 2%

    sleuthkit · the sleuth kitMar 8, 2020

  • CVE-2019-14532
    40Plan

    An issue was discovered in The Sleuth Kit (TSK) 4.6.6.

    CriticalCVSS 9.8No exploitEPSS 2%

    sleuthkit · the sleuth kitAug 2, 2019

  • CVE-2019-14531
    40Plan

    An issue was discovered in The Sleuth Kit (TSK) 4.6.6.

    CriticalCVSS 9.8No exploitEPSS 2%

    sleuthkit · the sleuth kitAug 2, 2019

  • CVE-2020-10233
    37Monitor

    In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a heap-based buffer over-read in ntfs_dinode_lookup in fs/ntfs.c.

    CriticalCVSS 9.1No exploitEPSS 2%

    sleuthkit · the sleuth kitMar 8, 2020

  • CVE-2026-40024
    33Monitor

    Sleuth Kit tsk_recover Path Traversal

    HighCVSS 8.4No exploitEPSS 0%

    sleuthkit · the sleuth kitApr 8, 2026

  • CVE-2022-45639
    32Monitor

    OS Command injection vulnerability in sleuthkit fls tool 4.11.1 allows attackers to execute arbitrary commands via a crafted value to the m

    HighCVSS 7.8Proof of conceptEPSS 5%

    sleuthkit · the sleuth kitJan 23, 2023

  • CVE-2018-11738
    32Monitor

    An issue was discovered in libtskfs.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1.

    HighCVSS 8.1No exploitEPSS 1%

    sleuthkit · the sleuth kitJun 5, 2018

  • CVE-2018-11737
    32Monitor

    An issue was discovered in libtskfs.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1.

    HighCVSS 8.1No exploitEPSS 1%

    sleuthkit · the sleuth kitJun 5, 2018

  • CVE-2018-11740
    32Monitor

    An issue was discovered in libtskbase.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1.

    HighCVSS 8.1No exploitEPSS 1%

    sleuthkit · the sleuth kitJun 5, 2018

  • CVE-2018-11739
    32Monitor

    An issue was discovered in libtskimg.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1.

    HighCVSS 8.1No exploitEPSS 1%

    sleuthkit · the sleuth kitJun 5, 2018

  • CVE-2018-19497
    26Monitor

    In The Sleuth Kit (TSK) through 4.6.4, hfs_cat_traverse in tsk/fs/hfs.c does not properly determine when a key length is too large, which al

    MediumCVSS 6.5No exploitEPSS 2%

    sleuthkit · the sleuth kitNov 29, 2018

  • CVE-2019-1010065
    26Monitor

    The Sleuth Kit 4.6.0 and earlier is affected by: Integer Overflow.

    MediumCVSS 6.5No exploitEPSS 1%

    sleuthkit · the sleuth kitJul 18, 2019

  • CVE-2017-13755
    22Monitor

    In The Sleuth Kit (TSK) 4.4.2, opening a crafted ISO 9660 image triggers an out-of-bounds read in iso9660_proc_dir() in tsk/fs/iso9660_dent.

    MediumCVSS 5.5No exploitEPSS 1%

    sleuthkit · the sleuth kitAug 29, 2017

  • CVE-2017-13760
    22Monitor

    In The Sleuth Kit (TSK) 4.4.2, fls hangs on a corrupt exfat image in tsk_img_read() in tsk/img/img_io.c in libtskimg.a.

    MediumCVSS 5.5No exploitEPSS 1%

    sleuthkit · the sleuth kitAug 29, 2017

  • CVE-2017-13756
    22Monitor

    In The Sleuth Kit (TSK) 4.4.2, opening a crafted disk image triggers infinite recursion in dos_load_ext_table() in tsk/vs/dos.c in libtskvs.

    MediumCVSS 5.5No exploitEPSS 1%

    sleuthkit · the sleuth kitAug 29, 2017

  • CVE-2026-40026
    19Monitor

    Sleuth Kit ISO9660 SUSP Extension Reference Out-of-Bounds Read

    MediumCVSS 4.8No exploitEPSS 0%

    sleuthkit · the sleuth kitApr 8, 2026

  • CVE-2026-40025
    19Monitor

    Sleuth Kit APFS Keybag Parser Out-of-Bounds Read

    MediumCVSS 4.8No exploitEPSS 0%

    sleuthkit · the sleuth kitApr 8, 2026

  • CVE-2012-5619
    8Monitor

    The Sleuth Kit (TSK) 4.0.1 does not properly handle "." (dotfile) file system entries in FAT file systems and other file systems for which .

    LowCVSS 2.1No exploitEPSS 0%

    sleuthkit · the sleuth kitSep 29, 2014