CVE-2026-119602 libmspack through 0.11alpha Uninitialized Memory Disclosure via MS-ZIP Decompressor Window

libmspack through 0.11alpha contains an uninitialized memory disclosure vulnerability in the MS-ZIP decompressor that allows attackers to leak heap data via unchecked back-reference distances. Attackers can supply a crafted MS-ZIP CAB file whose first block begins with a back-reference, causing...

CVE-2026-119602 libmspack through 0.11alpha Uninitialized Memory Disclosure via MS-ZIP Decompressor Window

libmspack through 0.11alpha contains an uninitialized memory disclosure vulnerability in the MS-ZIP decompressor that allows attackers to leak heap data via unchecked back-reference distances. Attackers can supply a crafted MS-ZIP CAB file whose first block begins with a back-reference, causing...

PT-2026-133554

libmspack through 0.11alpha contains an uninitialized memory disclosure vulnerability in the MS-ZIP decompressor that allows attackers to leak heap data via unchecked back-reference distances. Attackers can supply a crafted MS-ZIP CAB file whose first block begins with a back-reference, causing...

PT-2015-4367

Name of the Vulnerable Software and Affected Versions libmspack versions prior to 0.5 Description The issue is related to the cabd extract function in libmspack, which does not properly handle decompression callbacks when encountering an invalid file after a valid one. This can be exploited by...