https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 12 Nov 2026 13:33:09 +0000 https://db.gcve.eu/vuln/cve-2026-110602 <p><strong>Affected:</strong> kyz libmspack</p> <p>libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajd_open() in mspack/kwajd.c that frees unzeroed filename and extra pointers on header read errors. Attackers can supply a truncated, empty, or wrong-signature KWAJ file to crash the process or obtain an arbitrary-free memory corruption primitive.</p> <p><strong>Affected:</strong> kyz libmspack</p> <p>libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajd_open() in mspack/kwajd.c that frees unzeroed filename and extra pointers on header read errors. Attackers can supply a truncated, empty, or wrong-signature KWAJ file to crash the process or obtain an arbitrary-free memory corruption primitive.</p> https://db.gcve.eu/vuln/cve-2026-110602 https://db.gcve.eu/vuln/usn-8973-1 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: libmspack, Ubuntu:24.04:LTS: libmspack, Ubuntu:26.10: libmspack, Ubuntu:26.04:LTS: libmspack</p> <p>It was discovered that libmspack did not properly initialize pointers when handling errors while reading KWAJ archive headers. An attacker could possibly use this issue to cause libmspack to crash, resulting in a denial of service, or execute arbitrary code.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: libmspack, Ubuntu:24.04:LTS: libmspack, Ubuntu:26.10: libmspack, Ubuntu:26.04:LTS: libmspack</p> <p>It was discovered that libmspack did not properly initialize pointers when handling errors while reading KWAJ archive headers. An attacker could possibly use this issue to cause libmspack to crash, resulting in a denial of service, or execute arbitrary code.</p> https://db.gcve.eu/vuln/usn-8973-1