Medium severity4.4NVD Advisory· Published May 6, 2026· Updated Jul 24, 2026

CVE-2026-7572

Description

An off-by-one error (CWE-193) in the ConsumeUnit16Array and ConsumeUnit64Array functions in Velocidex Velociraptor before version 0.76.5 on Windows and Linux allows a local attacker to cause a Denial of Service (DoS) via a process crash by providing a specially crafted .evtx file to the parse_evtx VQL plugin.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
www.velocidex.com/golang/velociraptorGo	< 0.76.5	0.76.5

Affected products

Rapid7/Velociraptor
cpe:2.3:a:rapid7:velociraptor:*:*:*:*:*:*:*:*
Range: <0.76.5
ghsa-coords2 versions
pkg:golang/www.velocidex.com/golang/velociraptor pkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Leap%2016.0
< 0.76.5+ 1 more
- (no CPE)range: < 0.76.5
- (no CPE)range: < 0.0.20260723T184607-160000.1.1

Patches

Vulnerability mechanics

References

docs.velociraptor.app/announcements/advisories/cve-2026-7572/nvdVendor Advisory
github.com/advisories/GHSA-6cmp-qv2f-x97xghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2026-7572ghsaADVISORY
docs.velociraptor.app/announcements/advisories/cve-2026-7572ghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.286
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000