Labyal libesedb contains a heap out‑of‑bounds read in the function libesedb_record_get_multi_value(). The vulnerability allows an attacker who supplies a specially crafted ESE/EDB database to read beyond a buffer boundary, exposing up to about 32 KiB of adjacent heap memory. This read can leak sensitive data that resides nearby in memory, leading to a confidentiality compromise; the attack can also crash esedbexport. The likely attack vector is the execution of esedbexport against a maliciously engineered database file, which is typically performed by a user with filesystem access to the file.

The affected vendor is libyal, product libesedb, for all releases through 20260704. No other versions or additional vendors are listed in the advisory.

The CVSS score of 6.9 indicates a medium severity vulnerability. The EPSS score is less than 1%, implying a low probability of exploitation in the wild, and the issue is not present in the CISA KEV catalog. Because exploitation requires the attacker to run esedbexport against a crafted file, the attack scenario is most relevant in environments that process untrusted ESE/EDB files manually. While the read size is limited, the potential leakage of sensitive data still poses a measurable risk, especially if the target system holds privileged information in memory.