QSearchQSearch

CVE-2026-7572

4.4 MEDIUM

An off-by-one error (CWE-193) in the ConsumeUnit16Array and ConsumeUnit64Array functions in Velocidex Velociraptor before version 0.76.5 ...

Published: 2026-05-06 · Last updated: 2026-06-01

Severity and scoring

CVSS
4.4 MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
CWE
CWE-193

Affected products

VendorProduct
rapid7velociraptor

Description

An off-by-one error (CWE-193) in the ConsumeUnit16Array and ConsumeUnit64Array functions in Velocidex Velociraptor before version 0.76.5 on Windows and Linux allows a local attacker to cause a Denial of Service (DoS) via a process crash by providing a specially crafted .evtx file to the parse_evtx VQL plugin.

Source: NVD

References

Related CVEs

Same vendor

  • CVE-2026-7573 — An authorization bypass (CWE-639) in the GetUserRoles gRPC API endpoint in Velocidex Velociraptor below version 0.76.5 allows any authent... (5.0 MEDIUM)
  • CVE-2026-4482 — The installer certificate files in the …/bootstrap/common/ssl folder do not seem to have restricted permissions on Windows systems (users... (5.5 MEDIUM)
  • CVE-2026-4837 — An eval() injection vulnerability in the Rapid7 Insight Agent beaconing logic for Linux versions could theoretically allow an attacker to... (6.6 MEDIUM)

Same CWE

  • CVE-2026-8357 — LibreOffice Calc compiles cell formulas when opening a spreadsheet
  • CVE-2026-54410 — nanoMODBUS through v1.23.0 contains an off-by-one buffer overflow in the recv_msg_header() function of the Modbus/TCP server that allows ... (8.6 HIGH)
  • CVE-2026-46559 — ImageMagick is free and open-source software used for editing and manipulating digital images (4.0 MEDIUM)
  • CVE-2026-45380 — bit7z is a cross-platform C++ static library that allows the compression/extraction of archive files (3.6 LOW)
  • CVE-2026-45358 — ImageMagick is free and open-source software used for editing and manipulating digital images (5.3 MEDIUM)