EUVD-2026-110491

libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecfurlvaluesreaddata that allows attackers to corrupt heap memory via crafted partial URL records. Attackers can supply a crafted MSIE cache index.dat file whose recovered partial record has an oversized unknownoffset...

CVE-2026-116743 libyal libmsiecf through 20260525 Double Free via libmsiecf_url_values_read_data

libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecfurlvaluesreaddata that allows attackers to corrupt heap memory via crafted partial URL records. Attackers can supply a crafted MSIE cache index.dat file whose recovered partial record has an oversized unknownoffset...

CVE-2026-116743

The libyal libmsiecf library (through version 20260525 ) is susceptible to a double free vulnerability within the libmsiecf_url_values_read_data() function. This flaw allows for heap memory corruption when processing crafted partial URL records. Specifically, an attacker can provide a manipulated...