A flaw was found in hivex. By supplying a specially crafted Windows registry hive file, an attacker can trigger an out-of-bounds memory read when hivex parses registry values containing malformed large data block lists. This issue can cause the application processing the registry file to crash, resulting in a Denial of Service (DoS).
CVE-2026-120740
CVSS base score
2.0 (v3.1)
Severity
LOW
Attack vector
Network
Weakness
CWE-125
Last modified
November 2, 2026
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:L