CVE-2026-111147

The Libyal libesedb library (versions through 20260704 ) is vulnerable to a heap out-of-bounds read in the libesedb_record_get_multi_value() function. This issue stems from the use of unbounded multi-value offset tables , which can be exploited by an attacker providing a crafted ESE/EDB database ...

CVE-2026-111147 Libyal libesedb through 20260704 Heap Out-of-Bounds Read via libesedb_record_get_multi_value

Libyal libesedb through 20260704 contains a heap out-of-bounds read vulnerability in libesedbrecordgetmultivalue that allows attackers to read past buffers via unbounded multi-value offset tables. Attackers can supply a crafted ESE/EDB database processed by esedbexport to crash the application or...

CVE-2026-110598

Libyal libpff through 20260926 contains an integer underflow in libpffrecordentrygetmultivalue that allows attackers to trigger heap out-of-bounds reads via non-monotonic multi-value offsets. Attackers can craft PST, OST or PAB files with decreasing PTMVSTRING8, PTMVUNICODE or PTMVBINARY offsets ...

EUVD-2026-101226

Libyal libpff through 20260926 contains an integer underflow in libpffrecordentrygetmultivalue that allows attackers to trigger heap out-of-bounds reads via non-monotonic multi-value offsets. Attackers can craft PST, OST or PAB files with decreasing PTMVSTRING8, PTMVUNICODE or PTMVBINARY offsets ...

CVE-2026-110598 Libyal libpff through 20260926 heap out-of-bounds read via libpff_record_entry_get_multi_value

Libyal libpff through 20260926 contains an integer underflow in libpffrecordentrygetmultivalue that allows attackers to trigger heap out-of-bounds reads via non-monotonic multi-value offsets. Attackers can craft PST, OST or PAB files with decreasing PTMVSTRING8, PTMVUNICODE or PTMVBINARY offsets ...

CVE-2026-110598 Libyal libpff through 20260926 heap out-of-bounds read via libpff_record_entry_get_multi_value

Libyal libpff through 20260926 contains an integer underflow in libpffrecordentrygetmultivalue that allows attackers to trigger heap out-of-bounds reads via non-monotonic multi-value offsets. Attackers can craft PST, OST or PAB files with decreasing PTMVSTRING8, PTMVUNICODE or PTMVBINARY offsets ...

CVE-2026-110598

The Libyal libpff library (through version 20260926) contains an integer underflow vulnerability within the libpff_record_entry_get_multi_value() function. This flaw allows an attacker to trigger heap out-of-bounds reads by providing non-monotonic multi-value offsets. Specifically, by crafting PS...

libyal:libvsgpt_partition_fuzzer: Heap-buffer-overflow in libvsgpt_partition_entry_read_data

Detailed Report: https://oss-fuzz.com/testcase?key=6082663170244608 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libvsgptpartitionfuzzer Job Type: libfuzzerasani386libyal Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash Address: 0xf4e00651 Crash State:...

libyal:libfsfat_volume_fuzzer: Heap-buffer-overflow in libbfio_memory_range_io_handle_read_buffer

Detailed Report: https://oss-fuzz.com/testcase?key=4716871736426496 Project: libyal Fuzzing Engine: afl Fuzz Target: libfsfatvolumefuzzer Job Type: aflasanlibyal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 7 Crash Address: 0x7b7f1f7e0b83 Crash State:...

libyal:libfsfat_volume_fuzzer: Heap-buffer-overflow in libbfio_memory_range_io_handle_read_buffer

Detailed Report: https://oss-fuzz.com/testcase?key=5148110800879616 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libfsfatvolumefuzzer Job Type: libfuzzerasanlibyal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 9 Crash Address: 0x76f4f2be0b82 Crash State:...

libyal:libvsgpt_partition_fuzzer: Crash in libvsgpt_partition_entry_read_data

Detailed Report: https://oss-fuzz.com/testcase?key=4850812543893504 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libvsgptpartitionfuzzer Job Type: libfuzzerasani386libyal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x264405c0 Crash State: libvsgptpartitionentryreaddata...

libyal:libluksde_volume_fuzzer: Heap-buffer-overflow in libfcrypto_internal_serpent_context_decrypt_block

Detailed Report: https://oss-fuzz.com/testcase?key=6623037928308736 Project: libyal Fuzzing Engine: afl Fuzz Target: libluksdevolumefuzzer Job Type: aflasanlibyal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x75e38e9e0123 Crash State:...

libyal:libluksde_volume_fuzzer: Heap-buffer-overflow in libcaes_crypt_ecb

Detailed Report: https://oss-fuzz.com/testcase?key=5126067141279744 Project: libyal Fuzzing Engine: afl Fuzz Target: libluksdevolumefuzzer Job Type: aflasanlibyal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x796095de0123 Crash State: libcaescryptecb libcaescryptcbc...

libyal:libluksde_volume_fuzzer: Stack-buffer-overflow in libluksde_password_pbkdf2

Detailed Report: https://oss-fuzz.com/testcase?key=5513603281911808 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libluksdevolumefuzzer Job Type: libfuzzerasani386libyal Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0xf66f0070 Crash State:...

libyal:libqcow_file_fuzzer: Heap-buffer-overflow in libqcow_internal_file_read_buffer_from_file_io_handle

Detailed Report: https://oss-fuzz.com/testcase?key=6523664565338112 Project: libyal Fuzzing Engine: afl Fuzz Target: libqcowfilefuzzer Job Type: aflasanlibyal Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x77469d0e06d3 Crash State:...

libyal:libfsxfs_file_entry_fuzzer: Heap-buffer-overflow in libfsxfs_directory_table_read_data

Detailed Report: https://oss-fuzz.com/testcase?key=6691832884166656 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libfsxfsfileentryfuzzer Job Type: libfuzzerasani386libyal Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0xf2d03c00 Crash State:...

libyal:libfsxfs_extended_attribute_fuzzer: Heap-buffer-overflow in libfsxfs_directory_table_read_data

Detailed Report: https://oss-fuzz.com/testcase?key=5938007135027200 Project: libyal Fuzzing Engine: afl Fuzz Target: libfsxfsextendedattributefuzzer Job Type: aflasanlibyal Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x7994ce7e0500 Crash State:...

libyal:libfsxfs_file_entry_fuzzer: Index-out-of-bounds in libfsxfs_inode_read_data

Detailed Report: https://oss-fuzz.com/testcase?key=6177179972206592 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libfsxfsfileentryfuzzer Job Type: libfuzzerubsanlibyal Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: libfsxfsinodereaddata...

libyal:libfsntfs_volume_fuzzer: Heap-buffer-overflow in libfsntfs_index_value_read

Detailed Report: https://oss-fuzz.com/testcase?key=4979273434988544 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libfsntfsvolumefuzzer Job Type: libfuzzerasanlibyal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7921ee5e0839 Crash State:...

Linux Distros Unpatched Vulnerability : CVE-2020-18897

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An use-after-free vulnerability in the libpffitemtreecreatenode function of libyal Libpff before 20180623 allows attackers to cause a denial of service DOS or...