Skip to content
OpenAdvisories

Package · Debian

libpff

4 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.1

    Libyal libpff through 20260926 heap out-of-bounds read via libpff_record_entry_get_multi_value

    Libyal libpff through 20260926 contains an integer underflow in libpff_record_entry_get_multi_value() that allows attackers to trigger heap out-of-bounds reads via non-monotonic multi-value offsets. Attackers can craft PST, OST or PAB files with decreasing PT…