CVE-2020-10233: Sleuthkit The Sleuth Kit

Critical severity, CVSS 9.1. EPSS: 2.4% chance of exploitation in the next 30 days.

In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a heap-based buffer over-read in ntfs_dinode_lookup in fs/ntfs.c.

Affected products

• Sleuthkit The Sleuth Kit: up to and including 4.8.0

Published 2020-03-09. Last modified 2026-06-17.