CVE catalog

CVE-2026-110602

libmspack through 0.11alpha contains an uninitialized…

libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajd_open() in mspack/kwajd.c that frees unzeroed filename and extra pointers on header read errors. Attackers can supply a truncated, empty, or wrong-signature KWAJ file to crash the process or obtain an arbitrary-free memory corruption primitive.

Severity: Medium · CVSS 6.3CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H
Published: Oct 14, 2026, 2:16:43 PM UTC
Updated: Oct 14, 2026, 3:17:11 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.24% · Oct 27, 2026

Projects and upstream resources

[libmspack][Source-reported homepage]

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Version impact has not been established. The original provider fields are retained below.

Provider details and historical evidence

Original provider fields

{
  "package_releases": [
    {
      "name": "libmspack",
      "status": "fixed",
      "release": "sid",
      "version": "0.11-2"
    },
    {
      "name": "libmspack",
      "status": "fixed",
      "release": "forky",
      "version": "0.11-2"
    },
    {
      "name": "libmspack",
      "status": "vulnerable",
      "release": "trixie",
      "version": "0.11-1.1"
    },
    {
      "name": "libmspack",
      "status": "vulnerable",
      "release": "bookworm",
      "version": "0.11-1"
    }
  ],
  "fixed_versions": [
    {
      "bug": 1151083,
      "name": "libmspack",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "0.11-2"
    },
    {
      "bug": 1151083,
      "name": "libmspack",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "0.11-2"
    },
    {
      "bug": 1151083,
      "name": "libmspack",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": ""
    },
    {
      "bug": 1151083,
      "name": "libmspack",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": ""
    }
  ],
  "distribution_packages": [
    {
      "name": "clamav",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "0.97.8+dfsg-1ubuntu4",
        "0.97.8+dfsg-1ubuntu5",
        "0.98.1+dfsg-1ubuntu4",
        "0.98.1+dfsg-1ubuntu5",
        "0.98.1+dfsg-2ubuntu2",
        "0.98.1+dfsg-4ubuntu1",
        "0.98.1+dfsg-4ubuntu1.1",
        "0.98.5+addedllvm-0ubuntu0.14.04.1",
        "0.98.6+dfsg-0ubuntu0.14.04.1",
        "0.98.7+dfsg-0ubuntu0.14.04.1",
        "0.99.2+addedllvm-0ubuntu0.14.04.1",
        "0.99.2+addedllvm-0ubuntu0.14.04.2",
        "0.99.3+addedllvm-0ubuntu0.14.04.1",
        "0.99.4+addedllvm-0ubuntu0.14.04.1",
        "0.100.1+dfsg-1ubuntu0.14.04.1",
        "0.100.1+dfsg-1ubuntu0.14.04.2",
        "0.100.1+dfsg-1ubuntu0.14.04.3",
        "0.100.1+dfsg-1ubuntu0.14.04.4",
        "0.100.2+dfsg-1ubuntu0.14.04.1",
        "0.100.2+dfsg-1ubuntu0.14.04.2",
        "0.100.3+dfsg-0ubuntu0.14.04.1",
        "0.100.3+dfsg-0ubuntu0.14.04.1+esm1",
        "0.101.4+dfsg-0ubuntu0.14.04.1+esm1",
        "0.102.1+dfsg-0ubuntu0.14.04.1+esm1",
        "0.102.2+dfsg-0ubuntu0.14.04.1+esm1",
        "0.102.3+dfsg-0ubuntu0.14.04.1+esm1",
        "0.102.4+dfsg-0ubuntu0.14.04.1+esm1",
        "0.103.2+dfsg-0ubuntu0.14.04.1+esm1",
        "0.103.2+dfsg-0ubuntu0.14.04.1+esm2",
        "0.103.5+dfsg-0ubuntu0.14.04.1+esm1",
        "0.103.6+dfsg-0ubuntu0.14.04.1+esm1",
        "0.103.8+dfsg-0ubuntu0.14.04.1+esm1",
        "0.103.9+dfsg-0ubuntu0.14.04.1+esm1"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2026-110602"
    },
    {
      "name": "libmspack",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "0.4-1",
        "0.4-1ubuntu0.1~esm1",
        "0.4-1ubuntu0.1~esm2"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2026-110602"
    },
    {
      "name": "libmspack",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "0.5-1",
        "0.5-1ubuntu0.16.04.1",
        "0.5-1ubuntu0.16.04.2",
        "0.5-1ubuntu0.16.04.3",
        "0.5-1ubuntu0.16.04.4"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2026-110602"
    },
    {
      "name": "libmspack",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "0.6-3",
        "0.6-3ubuntu0.1",
        "0.6-3ubuntu0.2",
        "0.6-3ubuntu0.3"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2026-110602"
    },
    {
      "name": "libmspack",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "0.10.1-1",
        "0.10.1-2"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2026-110602"
    },
    {
      "name": "libmspack",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "0.10.1-2build1",
        "0.10.1-2build2"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2026-110602"
    },
    {
      "name": "libmspack",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "24.04",
      "versions": [
        "0.11-1",
        "0.11-1.1",
        "0.11-1.1build1"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2026-110602"
    },
    {
      "name": "libmspack",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "26.10",
      "versions": [
        "0.11-1.1build2"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2026-110602"
    },
    {
      "name": "libmspack",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "26.04",
      "versions": [
        "0.11-1.1build1",
        "0.11-1.1build2"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2026-110602"
    }
  ]
}

[Debian bug #1151083]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[libmspack0]Unknown
Source package: [libmspack]
Details (2)
- 0.11-1 · amd64 · bookworm
  Affected
  nvd · libmspack · debian · bookworm; nvd · libmspack · debian · 12
- 0.11-1 · arm64 · bookworm
  Affected
  nvd · libmspack · debian · bookworm; nvd · libmspack · debian · 12
[libmspack-dev]Unknown
Source package: [libmspack]
Details (2)
- 0.11-1 · amd64 · bookworm
  Affected
  nvd · libmspack · debian · bookworm; nvd · libmspack · debian · 12
- 0.11-1 · arm64 · bookworm
  Affected
  nvd · libmspack · debian · bookworm; nvd · libmspack · debian · 12
[libmspack-doc]Unknown
Source package: [libmspack]
Details (2)
- 0.11-1 · all · bookworm
  Affected
  nvd · libmspack · debian · bookworm; nvd · libmspack · debian · 12
- 0.11-1 · all · bookworm
  Affected
  nvd · libmspack · debian · bookworm; nvd · libmspack · debian · 12

[Debian 13 (Trixie)]

[libmspack0t64]Unknown
Source package: [libmspack]
Details (2)
- 0.11-1.1+b1 · amd64 · trixie
  Affected
  nvd · libmspack · debian · 13
- 0.11-1.1+b1 · arm64 · trixie
  Affected
  nvd · libmspack · debian · 13
[libmspack-dev]Unknown
Source package: [libmspack]
Details (2)
- 0.11-1.1+b1 · amd64 · trixie
  Affected
  nvd · libmspack · debian · 13
- 0.11-1.1+b1 · arm64 · trixie
  Affected
  nvd · libmspack · debian · 13
[libmspack-doc]Unknown
Source package: [libmspack]
Details (2)
- 0.11-1.1 · all · trixie
  Affected
  nvd · libmspack · debian · 13
- 0.11-1.1 · all · trixie
  Affected
  nvd · libmspack · debian · 13

Observed: Oct 28, 2026, 3:11:15 AM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]