CVE-2026-119601— AFFLIB through 3.7.22 Heap Out-of-Bounds Write in af_get_page

Quick assessment

Affected

sshock AFFLIB

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

AFFLIB 3.7.22 及更早版本在函数中存在堆越界写入漏洞。攻击者可通过提供页面大小与扇区大小不匹配的伪造 AFF 镜像，利用该漏洞破坏堆内存。具体而言，攻击者可设置一个大于扇区大小且不是扇区大小整数倍的页面大小，导致扇区零填充循环向缓冲区之外写入数据，从而引发取证工具崩溃。

CVSS 6.1 · Medium Updated Oct 30, 2026

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

AFFLIB through 3.7.22 Heap Out-of-Bounds Write in af_get_page

Source: CVE Program / CVE List V5

Vulnerability Description

AFFLIB through 3.7.22 contains a heap out-of-bounds write vulnerability in af_get_page() that allows attackers to corrupt heap memory by supplying crafted AFF images with mismatched page and sector sizes. Attackers can set a page size larger than and not a multiple of the sector size, causing the sector zero-fill loop to write past the buffer and crash forensic tools.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

跨界内存写

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
sshock	AFFLIB	0 ~ 3.7.22	-

II. Public POCs for CVE-2026-119601

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-119601

请登录查看更多情报信息。

Other References for CVE-2026-119601 (5)

https://github.com/sshock/AFFLIBv3/issues/61 issue-tracking
https://github.com/sshock/AFFLIBv3/blob/v3.7.22/lib/afflib_pages.cpp#L309-L315 technical-description
https://hackmd.io/@haindpwn/afflib-aff-get-page-sector-fill-oob-write third-party-advisory
https://github.com/sshock/AFFLIBv3 product
https://www.vulncheck.com/advisories/afflib-through-3.7.22-heap-out-of-bounds-write-in-af-get-page third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-119601

IV. Related Vulnerabilities

Same weakness: CWE-787