702 matches found
Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 : libmspack vulnerability (USN-8973-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 host has packages installed that are affected by a vulnerability as referenced in the USN-8973-1 advisory. It was discovered that libmspack did not properly initialize pointers when handling errors while reading KWAJ archive headers. An...
SUSE CVE-2026-119602
libmspack through 0.11alpha contains an uninitialized memory disclosure vulnerability in the MS-ZIP decompressor that allows attackers to leak heap data via unchecked back-reference distances. Attackers can supply a crafted MS-ZIP CAB file whose first block begins with a back-reference, causing...
USN-8973-1: libmspack vulnerability
It was discovered that libmspack did not properly initialize pointers when handling errors while reading KWAJ archive headers. An attacker could possibly use this issue to cause libmspack to crash, resulting in a denial of service, or execute arbitrary code...
CVE-2026-119602
libmspack through 0.11alpha contains an uninitialized memory disclosure vulnerability in the MS-ZIP decompressor that allows attackers to leak heap data via unchecked back-reference distances. Attackers can supply a crafted MS-ZIP CAB file whose first block begins with a back-reference, causing...
CLEANSTART-2023-QH25786 cabd_read_string function in mspack/cabd
Security vulnerability affects the libmspack package. The cabdreadstring function in mspack/cabd...
CLEANSTART-2023-EC41853 mspack/lzxd
Security vulnerability affects the libmspack package. mspack/lzxd...
CLEANSTART-2023-ET38519 issue was discovered in mspack/chmd
Security vulnerability affects the libmspack package. An issue was discovered in mspack/chmd...
CLEANSTART-2023-HP26221 issue was discovered in kwajd_read_headers in mspack/kwajd
Security vulnerability affects the libmspack package. An issue was discovered in kwajdreadheaders in mspack/kwajd...
CLEANSTART-2023-RF37695 issue was discovered in mspack/chmd
Security vulnerability affects the libmspack package. An issue was discovered in mspack/chmd...
CLEANSTART-2023-XW11505 issue was discovered in mspack/chmd
Security vulnerability affects the libmspack package. An issue was discovered in mspack/chmd...
CLEANSTART-2023-XE56780 chmextract
Security vulnerability affects the libmspack package. chmextract...
CLEANSTART-2023-OE27195 chmd_read_headers in mspack/chmd
Security vulnerability affects the libmspack package. chmdreadheaders in mspack/chmd...
CLEANSTART-2023-ND90886 In mspack/cab
Security vulnerability affects the libmspack package. In mspack/cab...
CLEANSTART-2023-NF67882 libmspack 0
Security vulnerability affects the libmspack package. libmspack 0...
CVE-2026-119602
A flaw was found in libmspack. The MS-ZIP decompressor fails to properly validate back-reference distances when decompressing cabinet CAB archive files. By providing a specially crafted archive whose initial block starts with a back-reference, an attacker can cause the extraction routine to copy...
AZL-112667 CVE-2026-119602 affecting package clamav 1.5.4-3
libmspack through 0.11alpha contains an uninitialized memory disclosure vulnerability in the MS-ZIP decompressor that allows attackers to leak heap data via unchecked back-reference distances. Attackers can supply a crafted MS-ZIP CAB file whose first block begins with a back-reference, causing...
CVE-2026-119602
libmspack through 0.11alpha contains an uninitialized memory disclosure vulnerability in the MS-ZIP decompressor that allows attackers to leak heap data via unchecked back-reference distances. Attackers can supply a crafted MS-ZIP CAB file whose first block begins with a back-reference, causing...
AZL-112676 CVE-2026-119602 affecting package libmspack 0.11alpha-2
libmspack through 0.11alpha contains an uninitialized memory disclosure vulnerability in the MS-ZIP decompressor that allows attackers to leak heap data via unchecked back-reference distances. Attackers can supply a crafted MS-ZIP CAB file whose first block begins with a back-reference, causing...
DEBIAN-CVE-2026-119602
libmspack through 0.11alpha contains an uninitialized memory disclosure vulnerability in the MS-ZIP decompressor that allows attackers to leak heap data via unchecked back-reference distances. Attackers can supply a crafted MS-ZIP CAB file whose first block begins with a back-reference, causing...
UBUNTU-CVE-2026-119602
libmspack through 0.11alpha contains an uninitialized memory disclosure vulnerability in the MS-ZIP decompressor that allows attackers to leak heap data via unchecked back-reference distances. Attackers can supply a crafted MS-ZIP CAB file whose first block begins with a back-reference, causing...