libfwsi

libfwsi is a library to access the Windows Shell Item format. Project information: Status: experimental Licence: LGPL-3.0-or-later For more information see: Project documentation: https://github.com/libyal/libfwsi/wiki/Home How to build from source: https://github.com/libyal/libfwsi/wiki/Building...

CVE-2026-111135 libfwsi through 20260522 Heap Out-of-Bounds Read via libfwsi_mtp_volume_values_read_data

libfwsi through 20260522 contains a heap out-of-bounds read vulnerability in libfwsimtpvolumevaluesreaddata that allows attackers to read past buffer bounds via crafted MTP volume shell items. Attackers can embed a 10 to 53 byte shell item with item data size of 44 or more in a .lnk file, jump li...