PatchSiren

twogood CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM twogood CVE published 2026-10-14

CVE-2026-110716

A heap out-of-bounds read vulnerability exists in unshield through 1.6.2 in the unshield_get_file_table() function. This allows attackers to read past heap allocations by providing a crafted InstallShield cabinet with out-of-range file_table_offset or large file counts, potentially crashing the unshield tool or library consumers. The vulnerability has a medium severity and can lead to crashes and potentia [truncated]