Skip to content
OpenAdvisories

Package · Debian

libmspack

20 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.3

    libmspack through 0.11alpha Uninitialized Pointer Free via kwajd_open Error Path

    libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajd_open() in mspack/kwajd.c that frees unzeroed filename and extra pointers on header read errors. Attackers can supply a truncated, empty, or wrong-signature KWAJ file to …