Description
libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecf_url_values_read_data() that allows attackers to corrupt heap memory via crafted partial URL records. Attackers can supply a crafted MSIE cache index.dat file whose recovered partial record has an oversized unknown_offset, crashing forensic tools processing it.
Published: 2026-10-26
Score: 6.8 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Heap corruption leading to crashes or potential memory corruption
Action: Patch
AI Analysis

Impact

The vulnerability is a double free in libmsiecf_url_values_read_data that may corrupt heap memory when forensic tools process a crafted MSIE cache index.dat file. This flaw, identified as CWE‑415, can cause a crash or, potentially, more severe memory corruption, allowing an attacker to undermine the integrity or availability of the tool.

Affected Systems

The product libyal libmsiecf, versions up to and including 20260525, is affected. This includes any installations of the libmsiecf library used in forensic or data recovery tools that parse MSIE cache files.

Risk and Exploitability

The CVSS score of 6.8 indicates a moderate severity. The EPSS score is not available, and the vulnerability is not currently in the CISA KEV catalog. Attackers can trigger the issue by supplying a maliciously crafted MSIE cache index.dat file, which is inferred to be the attack vector given the description. This can lead to heap corruption and tool crashes.

Generated by OpenCVE AI on October 27, 2026 at 08:42 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade libmsiecf to a version released after 20260525 that addresses the double free.
  • Restrict forensic tools to process only trusted MSIE cache files, or validate input before parsing to ensure the unknown_offset is within expected bounds.
  • Run forensic tools that handle MSIE cache files in a sandboxed environment or with least‑privilege permissions to contain potential memory corruption.

Generated by OpenCVE AI on October 27, 2026 at 08:42 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 27 Oct 2026 04:30:00 +0000

Type Values Removed Values Added
Description libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecf_url_values_read_data() that allows attackers to corrupt heap memory via crafted partial URL records. Attackers can supply a crafted MSIE cache index.dat file whose recovered partial record has an oversized unknown_offset, crashing forensic tools processing it.
Title libyal libmsiecf through 20260525 Double Free via libmsiecf_url_values_read_data
Weaknesses CWE-415
References
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'}

cvssV4_0

{'score': 6.8, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-10-26T21:52:42.185Z

Reserved: 2026-10-26T20:23:36.768Z

Link: CVE-2026-116743

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-26T22:16:58.823

Modified: 2026-10-26T22:16:58.823

Link: CVE-2026-116743

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-27T08:45:14Z

Weaknesses