Medium severity4.4NVD Advisory· Published May 6, 2026· Updated May 7, 2026

CVE-2026-7572

Description

An off-by-one error (CWE-193) in the ConsumeUnit16Array and ConsumeUnit64Array functions in Velocidex Velociraptor before version 0.76.5 on Windows and Linux allows a local attacker to cause a Denial of Service (DoS) via a process crash by providing a specially crafted .evtx file to the parse_evtx VQL plugin.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
www.velocidex.com/golang/velociraptorGo	< 0.76.5	0.76.5

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

github.com/advisories/GHSA-6cmp-qv2f-x97xghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2026-7572ghsaADVISORY
docs.velociraptor.app/announcements/advisories/cve-2026-7572ghsaWEB
docs.velociraptor.app/announcements/advisories/cve-2026-7572/nvd

News mentions

No linked articles in our index yet.

cvss	0.286
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000