PT-2026-114040 · Libyal · Libpff
CVSS v3.1
6.1
Medium
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H |
Libyal libpff through 20260926 contains an integer underflow in libpff record entry get multi value() that allows attackers to trigger heap out-of-bounds reads via non-monotonic multi-value offsets. Attackers can craft PST, OST or PAB files with decreasing PT MV STRING8, PT MV UNICODE or PT MV BINARY offsets to crash libpff, pypff or pffexport and expose adjacent heap memory.
Fix
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Libpff