This vulnerability involves buffer overruns in the libfsimage iso9660 driver of the Xen hypervisor. The code incorrectly derives several lengths directly from attacker‑controlled on‑disk fields—such as directory record lengths and Rock Ridge extension sizes—without validating them. The result is that a crafted ISO9660 image can cause the hypervisor to read or write beyond allocated buffers, potentially corrupting memory. This is a classic input‑validation flaw (CWE‑20) that could lead to a crash or remote code execution on the host, affecting confidentiality, integrity, or availability of the system.

Xen hypervisor (any release). No specific version information is provided in the advisory.

The CVSS score of 5.5 indicates moderate severity, and the EPSS score of less than 1 % suggests the likelihood of exploitation is low. The vulnerability is not listed in CISA's KEV catalog. Exploitation would require an attacker to supply a malicious ISO9660 image that the host processes during boot time, typically via the pygrub bootloader. The likely attack vector is a local or physical one, but tenants could also drive the attack in multi‑tenant environments by launching a guest that boots from a crafted image. The flaw could result in memory corruption or, in the worst case, remote code execution on the Xen host.