CVE-2026-45785 OpenMcdf: Uncatchable infinite loop in DirectoryTree.TryGetDirectoryEntry on crafted CFB directory cycle

OpenMcdf is a fully .NET / C library to manipulate Compound File Binary File Format files, also known as Structured Storage. In 3.1.3 and earlier, the BST name-lookup loop in DirectoryTree.TryGetDirectoryEntry OpenMcdf/DirectoryTree.cs:35-46 walks directory entries by repeatedly calling...

CVE-2026-45785

creationtimestamp| type| source ---|---|--- 2026-05-14 03:12:49+00:00| published-proof-of-concept| https://github.com/openmcdf/openmcdf/security/advisories/GHSA-5qwm-7pvp-w988...