https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-05T04:21:35.436968+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-116743 fkie_cve-2026-116743 2026-11-05T04:21:35.439221+00:00

libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecf_url_values_read_data() that allows attackers to corrupt heap memory via crafted partial URL records. Attackers can supply a crafted MSIE cache index.dat file whose recovered partial record has an oversized unknown_offset, crashing forensic tools processing it.

 https://db.gcve.eu/vuln/ghsa-69hw-fmf2-8wv2 GHSA-69hw-fmf2-8wv2 2026-11-05T04:21:35.439281+00:00

libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecf_url_values_read_data() that allows attackers to corrupt heap memory via crafted partial URL records. Attackers can supply a crafted MSIE cache index.dat file whose recovered partial record has an oversized unknown_offset, crashing forensic tools processing it.

 https://db.gcve.eu/vuln/ubuntu-cve-2026-116743 UBUNTU-CVE-2026-116743 2026-11-05T04:21:35.439300+00:00

Affected: Ubuntu:16.04:LTS: libmsiecf, Ubuntu:18.04:LTS: libmsiecf, Ubuntu:20.04:LTS: libmsiecf, Ubuntu:22.04:LTS: libmsiecf, Ubuntu:24.04:LTS: libmsiecf, Ubuntu:26.10: libmsiecf, Ubuntu:26.04:LTS: libmsiecf

libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecf_url_values_read_data() that allows attackers to corrupt heap memory via crafted partial URL records. Attackers can supply a crafted MSIE cache index.dat file whose recovered partial record has an oversized unknown_offset, crashing forensic tools processing it.