p PatchFirst

PatchFirst · Latest vulnerabilities

parted vulnerabilities

Vulnerabilities published for parted in the last 30 days: 2. Listed in the KEV catalogue: 0.

RSS ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 2

  1. CVE-2026-89088

    Medium · CVSS 5.5EPSS 0.12%No fix published

    Parted: parted: denial of service via heap buffer overflow during fat16 resize

    A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resize a specially crafted FAT16 file system image with malformed directory metadata, an attacker can trigger an oversized read into a fixed-size memory buffer. This issue causes memory corruption, resulting in an application crash and a denial of service (DoS).

    Published Updated
  2. CVE-2026-89085

    Medium · CVSS 6.6EPSS 0.16%No fix published

    Parted: parted: heap-based buffer overflow via crafted fat32 filesystem image

    A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image, resulting in an application crash leading to a Denial of Service (DoS) or potential memory corruption.

    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →