Skip to content
OpenAdvisories

Package · Debian

libpff

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Medium 6.1
    CVE-2026-110598

    Libyal libpff through 20260926 heap out-of-bounds read via libpff_record_entry_get_multi_value

    Libyal libpff through 20260926 contains an integer underflow in libpff_record_entry_get_multi_value() that allows attackers to trigger heap out-of-bounds reads via non-monotonic multi-value offsets. Attackers can craft PST, OST or PAB files with decreasing PT…

    libyal libpff libpff libpff Debian Ubuntu
  • Unscored —
    CVE-2020-18897

    An use-after-free vulnerability in the libpff_item_tree_create_node function of libyal Libpff before 20180623 allows at…

    libpff libpff Debian Ubuntu
  • Unscored —
    CVE-2018-20348

    libpff_item_tree_create_node in libpff_item_tree.c in libpff before experimental-20180714 allows attackers to cause a d…

    libpff libpff Debian Ubuntu
  • Unscored —
    CVE-2018-11723

    The libpff_name_to_id_map_entry_read function in libpff_name_to_id_map.c in libyal libpff through 2018-04-28 allows rem…

    libpff Debian