CVE catalog

CVE-2026-116743

libmsiecf: CVE-2026-116743

[CVE catalog]

Severity
Medium
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.13% · Oct 27, 2026

libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecf_url_values_read_data() that allows attackers to corrupt heap memory via crafted partial URL records. Attackers can supply a crafted MSIE cache index.dat file whose recovered partial record has an oversized unknown_offset, crashing forensic tools processing it.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibmsiecfsid20240425-1vulnerable
Debianlibmsiecfforky20240425-1vulnerable
Debianlibmsiecftrixie20181227-3vulnerable
Debianlibmsiecfbookworm20181227-2vulnerable
Ubuntulibmsiecf16.0420150708-2vulnerable
Ubuntulibmsiecf16.0420151205-1vulnerable
Ubuntulibmsiecf16.0420151220-1vulnerable
Ubuntulibmsiecf16.0420160107-1vulnerable
Ubuntulibmsiecf18.0420170116-1build1vulnerable
Ubuntulibmsiecf18.0420170116-2vulnerable
Ubuntulibmsiecf20.0420181227-1vulnerable
Ubuntulibmsiecf20.0420181227-1ubuntu1vulnerable
Ubuntulibmsiecf20.0420181227-1ubuntu2vulnerable
Ubuntulibmsiecf20.0420181227-1.1vulnerable
Ubuntulibmsiecf22.0420181227-2vulnerable
Ubuntulibmsiecf22.0420181227-2build1vulnerable
Ubuntulibmsiecf24.0420181227-2build2vulnerable
Ubuntulibmsiecf24.0420181227-2build3vulnerable
Ubuntulibmsiecf24.0420181227-2.1vulnerable
Ubuntulibmsiecf24.0420181227-2.1build1vulnerable
Ubuntulibmsiecf26.1020181227-3build1vulnerable
Ubuntulibmsiecf26.1020240425-1vulnerable
Ubuntulibmsiecf26.0420181227-3vulnerable
Ubuntulibmsiecf26.0420181227-3build1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlibmsiecfsourcesid(unfixed)not yet assignedNot reportedNot reported
Debianlibmsiecfsourceforky(unfixed)not yet assignedNot reportedNot reported
Debianlibmsiecfsourcetrixie(unfixed)not yet assignedNot reportedNot reported
Debianlibmsiecfsourcebookworm(unfixed)not yet assignedNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libmsiecf1]Affected

    Source package: [libmsiecf]

    Details (2)

    • 20181227-2+b2 · amd64 · bookworm

      Affected

      dsa · libmsiecf · debian · bookworm; dsa · libmsiecf · debian · 12

    • 20181227-2+b2 · arm64 · bookworm

      Affected

      dsa · libmsiecf · debian · bookworm; dsa · libmsiecf · debian · 12

  • [libmsiecf-dev]Affected

    Source package: [libmsiecf]

    Details (2)

    • 20181227-2+b2 · amd64 · bookworm

      Affected

      dsa · libmsiecf · debian · bookworm; dsa · libmsiecf · debian · 12

    • 20181227-2+b2 · arm64 · bookworm

      Affected

      dsa · libmsiecf · debian · bookworm; dsa · libmsiecf · debian · 12

  • [libmsiecf-utils]Affected

    Source package: [libmsiecf]

    Details (2)

    • 20181227-2+b2 · amd64 · bookworm

      Affected

      dsa · libmsiecf · debian · bookworm; dsa · libmsiecf · debian · 12

    • 20181227-2+b2 · arm64 · bookworm

      Affected

      dsa · libmsiecf · debian · bookworm; dsa · libmsiecf · debian · 12

  • [python3-libmsiecf]Affected

    Source package: [libmsiecf]

    Details (2)

    • 20181227-2+b2 · amd64 · bookworm

      Affected

      dsa · libmsiecf · debian · bookworm; dsa · libmsiecf · debian · 12

    • 20181227-2+b2 · arm64 · bookworm

      Affected

      dsa · libmsiecf · debian · bookworm; dsa · libmsiecf · debian · 12

[Debian 13 (Trixie)]

  • [libmsiecf1t64]Affected

    Source package: [libmsiecf]

    Details (2)

    • 20181227-3 · amd64 · trixie

      Affected

      dsa · libmsiecf · debian · 13

    • 20181227-3 · arm64 · trixie

      Affected

      dsa · libmsiecf · debian · 13

  • [libmsiecf-dev]Affected

    Source package: [libmsiecf]

    Details (2)

    • 20181227-3 · amd64 · trixie

      Affected

      dsa · libmsiecf · debian · 13

    • 20181227-3 · arm64 · trixie

      Affected

      dsa · libmsiecf · debian · 13

  • [libmsiecf-utils]Affected

    Source package: [libmsiecf]

    Details (2)

    • 20181227-3 · amd64 · trixie

      Affected

      dsa · libmsiecf · debian · 13

    • 20181227-3 · arm64 · trixie

      Affected

      dsa · libmsiecf · debian · 13

  • [python3-libmsiecf]Affected

    Source package: [libmsiecf]

    Details (2)

    • 20181227-3 · amd64 · trixie

      Affected

      dsa · libmsiecf · debian · 13

    • 20181227-3 · arm64 · trixie

      Affected

      dsa · libmsiecf · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]