CVE-2026-62423
Deferred Deferred - Pending Action

Buffer Overflow in libfsimage ISO9660 Driver

Publication date: 2026-07-28

Last updated on: 2026-07-28

Assigner: Xen Project

Description
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them: * The directory loop itself assumes a good record length. This is CVE-2026-42494. * The calculation of the System Use area may underflow. This is CVE-2026-42495. * The Rock Ridge extension loop assumes a good (inner) record length. This is CVE-2026-62423. * The Rock Ridge NM record processing assumes a good entry length. This is CVE-2026-62424. * The Rock Ridge CE record processing assumes a good size and offset. This is CVE-2026-62425.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-28
Last Modified
2026-07-28
Generated
2026-08-17
AI Q&A
2026-07-28
EPSS Evaluated
2026-08-16
NVD
CVE-2026-62423
EUVD
EUVD-2026-49774

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
xen libfsimage *
xen xen From 3.2 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-130 The product parses a formatted message or structure, but it does not handle or incorrectly handles a length field that is inconsistent with the actual length of the associated data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-62423 is a vulnerability in libfsimage's iso9660 driver where the Rock Ridge extension loop assumes a valid record length without proper validation. This could allow an attacker to manipulate on-disk data to cause incorrect processing.

Detection Guidance

This vulnerability involves the Rock Ridge extension loop in libfsimage's iso9660 driver assuming a good record length without validation. Detection requires examining filesystem parsing code for improper length handling in Rock Ridge extensions.

Impact Analysis

This vulnerability could lead to denial of service, data corruption, or potential code execution if exploited. It specifically affects systems using the libfsimage iso9660 driver to process ISO 9660 filesystems with Rock Ridge extensions.

Compliance Impact

This vulnerability involves incorrect handling of Rock Ridge extension loop record lengths in libfsimage's iso9660 driver, which could lead to memory corruption or crashes. It does not directly affect compliance with GDPR, HIPAA, or similar standards as it is a low-level system driver issue rather than a data protection or privacy violation.

Mitigation Strategies

Apply patches from Xen.org addressing CVE-2026-62423. Disable or restrict access to ISO9660 filesystem parsing in affected systems until patched. Monitor vendor advisories for updates to libfsimage.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-62423. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart