657 matches found
CVE-2026-110602
libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajdopen in mspack/kwajd.c that frees unzeroed filename and extra pointers on header read errors. Attackers can supply a truncated, empty, or wrong-signature KWAJ file to crash the process or obtain an...
CVE-2026-110602
A flaw was found in libmspack. An attacker could exploit this vulnerability by enticing a user or application to process a specially crafted KWAJ compressed file containing invalid or truncated headers. When handling these errors, the library attempts to release uninitialized memory pointers,...
CVE-2026-110602 libmspack through 0.11alpha Uninitialized Pointer Free via kwajd_open Error Path
libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajdopen in mspack/kwajd.c that frees unzeroed filename and extra pointers on header read errors. Attackers can supply a truncated, empty, or wrong-signature KWAJ file to crash the process or obtain an...
EUVD-2026-101230
libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajdopen in mspack/kwajd.c that frees unzeroed filename and extra pointers on header read errors. Attackers can supply a truncated, empty, or wrong-signature KWAJ file to crash the process or obtain an...
CVE-2026-110602
The libmspack library, versions up to and including 0.11alpha , contains an uninitialized pointer free vulnerability within the kwajd_open() function located in mspack/kwajd.c . The root cause is that the software frees unzeroed filename and extra pointers when encountering header read errors. An...
CVE-2026-110602
libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajdopen in mspack/kwajd.c that frees unzeroed filename and extra pointers on header read errors. Attackers can supply a truncated, empty, or wrong-signature KWAJ file to crash the process or obtain an...
CVE-2026-110602 libmspack through 0.11alpha Uninitialized Pointer Free via kwajd_open Error Path
libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajdopen in mspack/kwajd.c that frees unzeroed filename and extra pointers on header read errors. Attackers can supply a truncated, empty, or wrong-signature KWAJ file to crash the process or obtain an...
Linux Distros Unpatched Vulnerability : CVE-2026-110602
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajdopen in mspack/kwajd.c that frees unzeroed filename and extra pointers ...
Rocky Linux 8 [CIQ] Security Update: libmspack / libmspack-debuginfo / libmspack-debugsource / etc (crlsa-2020_1686)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20201686 advisory. libmspack: buffer overflow in function chmdreadheaders CVE-2019-1010305 Tenable has extracted the preceding description block directly from the CIQ security advisor...
K000161631: libmspack vulnerability CVE-2018-18585
Security Advisory Description chmdreadheaders in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second character such as the "/\0" name. CVE-2018-18585 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory...
MiracleLinux 7 : libmspack-0.5-0.8.alpha.el7 (AXSA:2020-580:02)
The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-580:02 advisory. libmspack: buffer overflow in function chmdreadheaders CVE-2019-1010305 Tenable has extracted the preceding description block directly from the MiracleLinux...
MiracleLinux 8 : libmspack-0.7-0.3.alpha.el8.4 (AXSA:2020-287:01)
The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2020-287:01 advisory. libmspack: buffer overflow in function chmdreadheaders CVE-2019-1010305 Tenable has extracted the preceding description block directly from the MiracleLinux...
MiracleLinux 7 : libmspack-0.5-0.7.alpha.el7 (AXSA:2019-4006:01)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-4006:01 advisory. libmspack: Out-of-bounds write in mspack/cab.h CVE-2018-18584 libmspack: chmdreadheaders fails to reject filenames containing NULL bytes...
MiracleLinux 7 : libmspack-0.5-0.6.alpha.el7 (AXSA:2018-3385:01)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2018-3385:01 advisory. libmspack: off-by-one error in the CHM PMGI/PMGL chunk number validity checks CVE-2018-14679 libmspack: off-by-one error in the CHM chunk number...
EUVD-2005-3500
Malware in sbrugna...
EUVD-2018-6576
Malware in sbrugna...
EUVD-2018-6575
Malware in sbrugna...
EUVD-2017-15476
Malware in sbrugna...