libmsiecf vulnerabilities

CVEs whose affected-version data names the libmsiecf package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-116743Medium· 5.5

2d ago

libyal libmsiecf through 20260525 Double Free via libmsiecf_url_values_read_data

libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecf_url_values_read_data() that allows attackers to corrupt heap memory via crafted partial URL records. Attackers can supply a crafted MSIE cache index.dat …

▾ Sunlitlibyal · libmsiecfEPSS 0.13%via CVEORG