CVE-2026-111140

The libregf library (versions through 20260526 ) is vulnerable to a heap out-of-bounds read in the libregf_value_item_read_value_data() function. The root cause is a failure to subtract the 4-byte old-format cell offset when bounding the value data size. An attacker can exploit this by providing ...