Commit fd586ed62 for clamav.net
commit fd586ed62a579a095f5494968ce440fb522feb99
Author: Val S. <valsnyde@cisco.com>
Date: Fri Aug 7 13:45:42 2026 -0400
Libclamav: fix GPT partition name conversion index (#66)
The GPT partition parser converted the UTF-16 partition name with the outer
partition loop index instead of the inner name loop index. A GPT with enough
partition entries could read and write past the end of the stack-allocated
partition entry while scanning disk images.
Use the name loop index so each UTF-16 code unit is converted in bounds.
Credit: Atuin - Automated Vulnerability Discovery Engine, Tianchu Chen of
Tencent Xuanwu Lab.
CLAM-2999