A heap-based buffer overflow has been identified in the file system resizing logic of libparted when handling FAT16 volumes. If an attacker constructs a specially crafted FAT16 image with malformed directory metadata and convinces a user or system administrator to resize it, the resize operation will read data that exceeds a fixed‑size memory buffer. This memory corruption causes the application to crash, resulting in a denial of service. The weakness is categorized as CWE‑787: Out-of-bounds Write.

The vulnerability affects Red Hat Enterprise Linux 6, 7, 8, 9, and 10, as all these releases include the libparted library. Any installation that uses the default libparted package and relies on the resize functionality for FAT16 file systems is at risk. Administrators should identify whether their systems run a vulnerable revision of the library and evaluate exposure based on current usage patterns.

The CVSS score of 5.5 reflects a moderate severity, mainly because the exploit requires local privileges and an attacker must supply a carefully crafted FAT16 image. The EPSS score is not available, so the likelihood of widespread exploitation is uncertain. The vulnerability is not listed in the CISA KEV catalog, indicating no known active, widespread exploitation campaigns at the time of reporting. However, because the flaw can crash the utility, local attackers or compromised users could leverage it to disrupt services or force manual intervention.