PT-2026-125492
CVE-2026-116743
·
Published
2026-10-26
·
Updated
2026-10-26
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecf url values read data() that allows attackers to corrupt heap memory via crafted partial URL records. Attackers can supply a crafted MSIE cache index.dat file whose recovered partial record has an oversized unknown offset, crashing forensic tools processing it.
Found an issue in the description? Have something to add? Feel free to write us 👾