CVE-2026-119602

libmspack through 0.11alpha contains an uninitialized memory disclosure vulnerability in the MS-ZIP decompressor that allows attackers to leak heap data via unchecked back-reference distances. Attackers can supply a crafted MS-ZIP CAB file whose first block begins with a back-reference, causing...

CVE-2026-119602 libmspack through 0.11alpha Uninitialized Memory Disclosure via MS-ZIP Decompressor Window

libmspack through 0.11alpha contains an uninitialized memory disclosure vulnerability in the MS-ZIP decompressor that allows attackers to leak heap data via unchecked back-reference distances. Attackers can supply a crafted MS-ZIP CAB file whose first block begins with a back-reference, causing...

CVE-2026-119602

The libmspack library (versions through 0.11alpha ) is vulnerable to an uninitialized memory disclosure within the MS-ZIP decompressor . The root cause is the lack of checks on back-reference distances during decompression. An attacker can provide a specially crafted MS-ZIP CAB file where the fir...

CVE-2026-119602: kyz libmspack: libmspack through 0.11alpha contains an uninitialized memory disclosure vulnerability in the MS-ZIP decompressor that…

libmspack through 0.11alpha contains an uninitialized memory disclosure vulnerability in the MS-ZIP decompressor that allows attackers to leak heap data via unchecked back-reference distances. Attackers can supply a crafted MS-ZIP CAB file whose first block begins with a back-reference, causing...

PT-2026-133554

libmspack through 0.11alpha contains an uninitialized memory disclosure vulnerability in the MS-ZIP decompressor that allows attackers to leak heap data via unchecked back-reference distances. Attackers can supply a crafted MS-ZIP CAB file whose first block begins with a back-reference, causing...