MEDIUMCVSS v3.1 6.6Vulnerability

CVE-2026-89085

A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image, resulting in an application crash leading to a Denial of Service (DoS) or potential memory corruption.

Properties

Severity
MEDIUM
Nvd fetched at
2026-10-20T21:14:08.448323+00:00
Epss score
0.0016
Cvss score
6.6
Cvss severity
MEDIUM
Retrieved at
2026-10-21T01:24:51+00:00
Last source
FIRST EPSS
Score
6.6
Cvss version
3.1
Cve id
CVE-2026-89085
Cvss vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
First seen by Signal
2026-10-18T13:39:03+00:00
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
Published at
2026-10-16T23:17:02.553
Last modified
2026-10-19T21:03:27.760
Epss percentile
0.04732

Related Entities (1)

HAS_WEAKNESS (1)

→[Weakness]Out-of-bounds Write

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-89085 (CVSS v3.1 6.6) — Ninja Signal Threat Intelligence | Ninja Signal