CVE-2019-14531: Sleuthkit The Sleuth Kit

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

An issue was discovered in The Sleuth Kit (TSK) 4.6.6. There is an out of bounds read on iso9660 while parsing System Use Sharing Protocol data in fs/iso9660.c.

Affected products

• Sleuthkit The Sleuth Kit: version 4.6.6 only

Published 2019-08-02. Last modified 2026-06-17.