Libyal

Exploited now

None of this vendor's CVEs are on CISA's known-exploited list.

Recent

• 5.5MediumOct 26, 2026Libyal libmsiecf Memory corruptionCVE-2026-116743libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecf_url_values_read_data() that allows attackers to corrupt heap memory via crafted partial URL records. Attackers can supply a crafted MSIE cache index.dat file whose recovered partial record has an oversized unknown_offset, crashing forensic tools processing it.
• 6.1MediumOct 26, 2026Libyal libphdi Memory corruptionCVE-2026-116737libphdi through 20260902 contains a heap out-of-bounds read vulnerability in libphdi_data_files_get_extent_data_file_path that uses the directory prefix length instead of the basename length. Attackers can supply a crafted Parallels disk image descriptor with a long directory prefix and short basename to crash the process or expose adjacent heap memory.
• 6.1MediumOct 26, 2026Libyal libpff Memory corruptionCVE-2026-116736Libpff through 20260926 contains a heap out-of-bounds read vulnerability in libpff_table_read_values_array because a 7c column definition's values_array_size is not checked against remaining buffer bytes. Attackers can supply a crafted PST, OST or PAB file to make applications read adjacent heap memory into record entry values or crash.
• 6.1MediumOct 26, 2026Libyal libpff Memory corruptionCVE-2026-116735libpff through 20260926 contains an off-by-one bounds check in libpff_table_read_6c_record_entries that allows attackers to trigger a heap out-of-bounds read via crafted 6c table record entries. Attackers can supply crafted PST, OST or PAB files to applications like pffexport or pypff to read adjacent heap memory or cause crashes.
• 3.3LowOct 26, 2026Libyal libfvde Memory corruptionCVE-2026-116729libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvde_encrypted_metadata_read_type_0x001a() caused by an unbounded strlen on embedded XML plist data. Attackers can supply a crafted FileVault 2 volume with non-NUL-terminated plist data, causing libfvde_volume_open() to read past the heap block buffer.
• 5.5MediumOct 26, 2026Libyal libfvde Memory corruptionCVE-2026-116728libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvde_encrypted_metadata_read_type_0x0024() because xml_plist_data_size is not checked against the source metadata block. Attackers can supply a crafted FileVault 2 Core Storage volume that makes libfvde_volume_open() copy past the heap block buffer, crashing the application.
• 6.1MediumOct 15, 2026Libyal libewf Memory corruptionCVE-2026-111159libewf through 20260924 contains a heap out-of-bounds read vulnerability in libewf_lef_extended_attribute_read_data() because UTF-16 name and value sizes are validated before being doubled. Attackers can supply a crafted .L01/.Lx01 file with oversized 'ea' metadata counts to crash the application or leak uninitialized heap memory through extended attributes.
• 6.1MediumOct 15, 2026Libyal libesedb Memory corruptionCVE-2026-111147Libyal libesedb through 20260704 contains a heap out-of-bounds read vulnerability in libesedb_record_get_multi_value() that allows attackers to read past buffers via unbounded multi-value offset tables. Attackers can supply a crafted ESE/EDB database processed by esedbexport to crash the application or expose up to about 32 KiB of adjacent heap memory.
• 6.1MediumOct 15, 2026Libyal libfwsi Memory corruptionCVE-2026-111134libfwsi through 20260522 contains a heap out-of-bounds read vulnerability in libfwsi_mtp_file_entry_values_read_data() that allows attackers to read past buffer bounds via crafted MTP file entry shell items. Attackers can embed a 10 to 73 byte shell item with item data size of 44 or more in .lnk files, jump lists or shell bags to crash libfwsi consumers.

See every Libyal entry on the dashboard.

Top products

• libpff2 CVEs in the last year
• libfvde2 CVEs in the last year
• libphdi1 CVE in the last year
• libmsiecf1 CVE in the last year
• libfwsi1 CVE in the last year
• libewf1 CVE in the last year
• libesedb1 CVE in the last year