https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-12T13:32:30.224874+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/ubuntu-cve-2026-110602 UBUNTU-CVE-2026-110602 2026-11-12T13:32:30.225957+00:00

Affected: Ubuntu:Pro:14.04:LTS: clamav, Ubuntu:Pro:14.04:LTS: libmspack, Ubuntu:16.04:LTS: libmspack, Ubuntu:18.04:LTS: libmspack, Ubuntu:20.04:LTS: libmspack, Ubuntu:22.04:LTS: libmspack, Ubuntu:24.04:LTS: libmspack, Ubuntu:26.10: libmspack, Ubuntu:26.04:LTS: libmspack

libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajd_open() in mspack/kwajd.c that frees unzeroed filename and extra pointers on header read errors. Attackers can supply a truncated, empty, or wrong-signature KWAJ file to crash the process or obtain an arbitrary-free memory corruption primitive.