CVE-2026-111134

The libfwsi library, in versions through 20260522 , contains a heap out-of-bounds read vulnerability within the libfwsi_mtp_file_entry_values_read_data() function. This flaw allows attackers to read past buffer bounds by providing crafted MTP file entry shell items . Specifically, embedding a 10 ...