https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-12T13:13:10.624779+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-110602 CVE-2026-110602 — libmspack through 0.11alpha Uninitialized Pointer Free via kwajd_open Error Path 2026-11-12T13:13:10.627595+00:00

Affected: kyz libmspack

libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajd_open() in mspack/kwajd.c that frees unzeroed filename and extra pointers on header read errors. Attackers can supply a truncated, empty, or wrong-signature KWAJ file to crash the process or obtain an arbitrary-free memory corruption primitive.

 https://db.gcve.eu/vuln/usn-8973-1 USN-8973-1 — libmspack vulnerability 2026-11-12T13:13:10.627690+00:00

Affected: Ubuntu:22.04:LTS: libmspack, Ubuntu:24.04:LTS: libmspack, Ubuntu:26.10: libmspack, Ubuntu:26.04:LTS: libmspack

It was discovered that libmspack did not properly initialize pointers when handling errors while reading KWAJ archive headers. An attacker could possibly use this issue to cause libmspack to crash, resulting in a denial of service, or execute arbitrary code.