Skip to content
OpenAdvisories

Package · Azure Linux

libmspack

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Low 3.7
    CVE-2026-119602

    libmspack through 0.11alpha Uninitialized Memory Disclosure via MS-ZIP Decompressor Window

    libmspack through 0.11alpha contains an uninitialized memory disclosure vulnerability in the MS-ZIP decompressor that allows attackers to leak heap data via unchecked back-reference distances. Attackers can supply a crafted MS-ZIP CAB file whose first block b…

    kyz libmspack clamav clamav Debian Ubuntu Azure Linux
  • Medium 6.3
    CVE-2026-110602

    libmspack through 0.11alpha Uninitialized Pointer Free via kwajd_open Error Path

    libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajd_open() in mspack/kwajd.c that frees unzeroed filename and extra pointers on header read errors. Attackers can supply a truncated, empty, or wrong-signature KWAJ file to …

    kyz libmspack clamav clamav Debian Ubuntu Azure Linux