{"id":"AZL-112336","summary":"CVE-2026-119601 affecting package afflib 3.7.20-1","details":"AFFLIB through 3.7.22 contains a heap out-of-bounds write vulnerability in af_get_page() that allows attackers to corrupt heap memory by supplying crafted AFF images with mismatched page and sector sizes. Attackers can set a page size larger than and not a multiple of the sector size, causing the sector zero-fill loop to write past the buffer and crash forensic tools.","modified":"2026-10-31T14:17:32.285212098Z","published":"2026-10-30T14:16:48Z","upstream":["CVE-2026-119601"],"references":[{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119601"}],"affected":[{"package":{"name":"afflib","ecosystem":"Azure Linux:3","purl":"pkg:rpm/azure-linux/afflib"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"3.7.20-1"}]}],"database_specific":{"source":"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-112336.json"}}],"schema_version":"1.9.2"}