MEDIUM
libyal
CVE published 2026-10-14
CVE-2026-110598
The CVE-2026-110598 vulnerability in libpff allows attackers to trigger heap out-of-bounds reads via non-monotonic multi-value offsets. This vulnerability can be exploited by crafting PST, OST, or PAB files with decreasing PT_MV_STRING8, PT_MV_UNICODE, or PT_MV_BINARY offsets, potentially leading to crashes, denial of service attacks, and exposure of sensitive information. Defenders responsible for system [truncated]