MGASA-2026-0512

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2026-0512.html
Import Source
https://advisories.mageia.org/MGASA-2026-0512.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2026-0512
Upstream
CVE (2)
  • CVE-2026-89085
  • CVE-2026-89088
Published
2026-10-17T03:21:49Z
Modified
2026-10-17T03:30:03Z
Summary
Updated parted package fixes security vulnerabilities
Details

A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image, resulting in an application crash leading to a Denial of Service (DoS) or potential memory corruption. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resize a specially crafted FAT16 file system image with malformed directory metadata, an attacker can trigger an oversized read into a fixed-size memory buffer. This issue causes memory corruption, resulting in an application crash and a denial of service (DoS).

References
Credits

Affected packages

Mageia:10 / parted

Package

Name
parted
Purl
pkg:rpm/mageia/parted?arch=source&distro=mageia-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.6-2.1.mga10

Ecosystem specific 

{
    "section":  "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2026-0512.json"