CVE-2026-77372 | VeraCrypt up to 1.26.29 Serialization Serializer.cpp DeserializeWString size/count heap-based overflow

A vulnerability was found in VeraCrypt up to 1.26.29. It has been declared as critical. This affects the function Serializer::DeserializeWString of the file src/Platform/Serializer.cpp of the component Serialization. Executing a manipulation of the argument size/count can lead to heap-based buffer overflow.

This vulnerability is registered as CVE-2026-77372. The attack needs to be launched locally. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More