CVE-2026-116735

Name of the Vulnerable Software and Affected Versions libpff versions prior to 20260927

Description An off-by-one bounds check in the libpff table read 6c record entries() function allows for a heap out-of-bounds read. This occurs when the software processes specially crafted 6c table record entries within PST, OST, or PAB files. Applications utilizing the library, such as pffexport or pypff, may experience crashes or allow the reading of adjacent heap memory.

Recommendations Update libpff to a version released after 20260926.