A flaw in the AFFLIB library allows a maliciously crafted AFF image to trigger a heap out‑of‑bounds write during page allocation, resulting in memory corruption that may crash forensic tools or alter recovered data. The vulnerability is a classic buffer overflow (CWE‑787) that can undermine data integrity and availability in environments processing AFF files.

Versions of AFFLIB up to and including 3.7.22, developed by sshock, are affected. These libraries are commonly embedded in forensic image utilities that read AFF formats, so any system utilizing this code path is potentially impacted.

The CVSS score of 6.9 indicates moderate severity, and the EPSS score is not available, suggesting no known widespread exploitation yet. Because an attacker must supply a crafted AFF image, the attack vector is likely local or remote via file ingestion. The run‑time impact could be a denial of service or subtle memory corruption if the tool runs with elevated privileges. As the vulnerability is not listed in CISA’s KEV catalog, immediate risk detection may be limited, but the potential for tooling crashes warrants attention.