bulk_extractor vulnerabilities

1 known vulnerability in bulk_extractor from Simsong. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  bulk_extractor: Out-of-bounds Write

  CVE-2026-24857Jan 28, 2026Simsong

  `bulk_extractor` is a digital forensics exploitation tool. Starting in version 1.4, `bulk_extractor`’s embedded unrar code has a heap‑buffer‑overflow in the RAR PPM LZ decoding path. A crafted RAR inside a disk image causes an out‑of‑bounds write in `Unpack::C