CVE-2026-64951 | BDVDB-2026-358381 Detail
Rapid7Velociraptor
Description#
A rogue Velociraptor client can upload a malformed sparse file such that if the GUI attempts to expand the file, a panic occurs which may crash the server process. The problem is a Divide by Zero bug in the ShouldPadFile() function.
Impact#
CAPEC-153 Input Data Manipulation
Weaknesses#
- CWE-369 Divide by zero
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.