EUVD-2026-117879

A security vulnerability has been detected in libyal libvmdk up to 3fdd7839758e9f44ef95e1dfccde8552b860a4fc. Affected is the function libvmdkextenttablegetextentdatafilepath of the file libvmdk/libvmdkextenttable.c of the component Extent Data File Handler. The manipulation leads to memory...

CVE-2026-123269

A vulnerability exists in the libvmdk component of libyal , specifically within the Descriptor File Parser . The libvmdk_descriptor_file_read_header function in libvmdk/libvmdk_descriptor_file.c is susceptible to an out-of-bounds read error. This flaw can be exploited from a local position to pot...

EUVD-2026-117882

A vulnerability was detected in libyal libvmdk. Affected by this vulnerability is the function libvmdkdescriptorfilereadheader of the file libvmdk/libvmdkdescriptorfile.c of the component Descriptor File Parser. The manipulation results in out-of-bounds read. The attack must be initiated from a...

CVE-2026-123268: libyal libvmdk: A security vulnerability has been detected in libyal libvmdk up to 3fdd7839758e9f44ef95e1dfccde8552b860a4fc

A security vulnerability has been detected in libyal libvmdk up to 3fdd7839758e9f44ef95e1dfccde8552b860a4fc. Affected is the function libvmdkextenttablegetextentdatafilepath of the file libvmdk/libvmdkextenttable.c of the component Extent Data File Handler. The manipulation leads to memory...

CVE-2026-123269: libyal libvmdk: A vulnerability was detected in libyal libvmdk

A vulnerability was detected in libyal libvmdk. Affected by this vulnerability is the function libvmdkdescriptorfilereadheader of the file libvmdk/libvmdkdescriptorfile.c of the component Descriptor File Parser. The manipulation results in out-of-bounds read. The attack must be initiated from a...

CVE-2026-123268

A memory corruption vulnerability exists in the libyal libvmdk component, specifically within the Extent Data File Handler . The issue is located in the function libvmdk_extent_table_get_extent_data_file_path inside the file libvmdk/libvmdk_extent_table.c. This vulnerability can be triggered remo...

libyal:libfwevt_xml_document_fuzzer: Heap-buffer-overflow in libuna_base16_stream_with_index_copy_from_byte_stream

Detailed Report: https://oss-fuzz.com/testcase?key=5487622785662976 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libfwevtxmldocumentfuzzer Job Type: libfuzzerasanlibyal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x792716ae040d Crash State:...

libyal:libfwevt_xml_document_fuzzer: Heap-buffer-overflow in libuna_unicode_character_copy_to_utf16

Detailed Report: https://oss-fuzz.com/testcase?key=5536563099140096 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libfwevtxmldocumentfuzzer Job Type: libfuzzerasani386libyal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0xf4f005b8 Crash State:...

libyal:libfwevt_xml_document_fuzzer: Heap-buffer-overflow in libfwevt_xml_tag_get_utf16_xml_string_with_index

Detailed Report: https://oss-fuzz.com/testcase?key=5298292892958720 Project: libyal Fuzzing Engine: afl Fuzz Target: libfwevtxmldocumentfuzzer Job Type: aflasanlibyal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0x762c3f6e0194 Crash State:...

CVE-2026-116743

libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecfurlvaluesreaddata that allows attackers to corrupt heap memory via crafted partial URL records. Attackers can supply a crafted MSIE cache index.dat file whose recovered partial record has an oversized unknownoffset...

Linux Distros Unpatched Vulnerability : CVE-2026-116743

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecfurlvaluesreaddata that allows attackers to corrupt heap memory via crafted...

SUSE CVE-2026-116743

libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecfurlvaluesreaddata that allows attackers to corrupt heap memory via crafted partial URL records. Attackers can supply a crafted MSIE cache index.dat file whose recovered partial record has an oversized unknownoffset...

EUVD-2026-110491

libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecfurlvaluesreaddata that allows attackers to corrupt heap memory via crafted partial URL records. Attackers can supply a crafted MSIE cache index.dat file whose recovered partial record has an oversized unknownoffset...

CVE-2026-116743

libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecfurlvaluesreaddata that allows attackers to corrupt heap memory via crafted partial URL records. Attackers can supply a crafted MSIE cache index.dat file whose recovered partial record has an oversized unknownoffset...

DEBIAN-CVE-2026-116743

libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecfurlvaluesreaddata that allows attackers to corrupt heap memory via crafted partial URL records. Attackers can supply a crafted MSIE cache index.dat file whose recovered partial record has an oversized unknownoffset...

UBUNTU-CVE-2026-116743

libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecfurlvaluesreaddata that allows attackers to corrupt heap memory via crafted partial URL records. Attackers can supply a crafted MSIE cache index.dat file whose recovered partial record has an oversized unknownoffset...

CVE-2026-116743

libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecfurlvaluesreaddata that allows attackers to corrupt heap memory via crafted partial URL records. Attackers can supply a crafted MSIE cache index.dat file whose recovered partial record has an oversized unknownoffset...

CVE-2026-116743 libyal libmsiecf through 20260525 Double Free via libmsiecf_url_values_read_data

libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecfurlvaluesreaddata that allows attackers to corrupt heap memory via crafted partial URL records. Attackers can supply a crafted MSIE cache index.dat file whose recovered partial record has an oversized unknownoffset...

CVE-2026-116743

The libyal libmsiecf library (through version 20260525 ) is susceptible to a double free vulnerability within the libmsiecf_url_values_read_data() function. This flaw allows for heap memory corruption when processing crafted partial URL records. Specifically, an attacker can provide a manipulated...

CVE-2026-116743

libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecfurlvaluesreaddata that allows attackers to corrupt heap memory via crafted partial URL records. Attackers can supply a crafted MSIE cache index.dat file whose recovered partial record has an oversized unknownoffset...