https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 08:50:36 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-111135 <p>libfwsi through 20260522 contains a heap out-of-bounds read vulnerability in libfwsi_mtp_volume_values_read_data() that allows attackers to read past buffer bounds via crafted MTP volume shell items. Attackers can embed a 10 to 53 byte shell item with item data size of 44 or more in a .lnk file, jump list or shell bag to crash consuming processes.</p> <p>libfwsi through 20260522 contains a heap out-of-bounds read vulnerability in libfwsi_mtp_volume_values_read_data() that allows attackers to read past buffer bounds via crafted MTP volume shell items. Attackers can embed a 10 to 53 byte shell item with item data size of 44 or more in a .lnk file, jump list or shell bag to crash consuming processes.</p> https://db.gcve.eu/vuln/fkie_cve-2026-111135 https://db.gcve.eu/vuln/ghsa-7h63-p8xp-f7mw <p>libfwsi through 20260522 contains a heap out-of-bounds read vulnerability in libfwsi_mtp_volume_values_read_data() that allows attackers to read past buffer bounds via crafted MTP volume shell items. Attackers can embed a 10 to 53 byte shell item with item data size of 44 or more in a .lnk file, jump list or shell bag to crash consuming processes.</p> <p>libfwsi through 20260522 contains a heap out-of-bounds read vulnerability in libfwsi_mtp_volume_values_read_data() that allows attackers to read past buffer bounds via crafted MTP volume shell items. Attackers can embed a 10 to 53 byte shell item with item data size of 44 or more in a .lnk file, jump list or shell bag to crash consuming processes.</p> https://db.gcve.eu/vuln/ghsa-7h63-p8xp-f7mw https://db.gcve.eu/vuln/ubuntu-cve-2026-111135 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libfwsi, Ubuntu:18.04:LTS: libfwsi, Ubuntu:20.04:LTS: libfwsi, Ubuntu:22.04:LTS: libfwsi, Ubuntu:24.04:LTS: libfwsi, Ubuntu:26.10: libfwsi, Ubuntu:26.04:LTS: libfwsi</p> <p>libfwsi through 20260522 contains a heap out-of-bounds read vulnerability in libfwsi_mtp_volume_values_read_data() that allows attackers to read past buffer bounds via crafted MTP volume shell items. Attackers can embed a 10 to 53 byte shell item with item data size of 44 or more in a .lnk file, jump list or shell bag to crash consuming processes.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libfwsi, Ubuntu:18.04:LTS: libfwsi, Ubuntu:20.04:LTS: libfwsi, Ubuntu:22.04:LTS: libfwsi, Ubuntu:24.04:LTS: libfwsi, Ubuntu:26.10: libfwsi, Ubuntu:26.04:LTS: libfwsi</p> <p>libfwsi through 20260522 contains a heap out-of-bounds read vulnerability in libfwsi_mtp_volume_values_read_data() that allows attackers to read past buffer bounds via crafted MTP volume shell items. Attackers can embed a 10 to 53 byte shell item with item data size of 44 or more in a .lnk file, jump list or shell bag to crash consuming processes.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-111135