AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-10-08T14:10:33.744Z and has not been modified since then. Dislocker through 0.7.3 contains an integer underflow vulnerability in get_vmk() and get_fvek() that allows attackers to trigger out-of-bounds heap reads via crafted datum sizes. Defenders should assess exposure and prioritize patching to preven [truncated]
A heap out-of-bounds read vulnerability exists in Dislocker through version 0.7.3. The vulnerability is caused by a lack of validation of dataset and datum sizes against the metadata allocation in the get_dataset() and get_next_datum() functions. An attacker can craft a BitLocker volume image with inflated dataset or datum sizes, which, when opened or mounted, can cause dislocker to crash or disclose adja [truncated]