Skip to content
OpenAdvisories

Package · NuGet

OpenMcdf

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.2
    CVE-2026-45785

    OpenMcdf: Uncatchable infinite loop in DirectoryTree.TryGetDirectoryEntry on crafted CFB directory cycle

    OpenMcdf is a fully .NET / C# library to manipulate Compound File Binary File Format files, also known as Structured Storage. In 3.1.3 and earlier, the BST name-lookup loop in DirectoryTree.TryGetDirectoryEntry (OpenMcdf/DirectoryTree.cs:35-46) walks director…

    openmcdf openmcdf OpenMcdf NuGet
  • Medium 6.2
    CVE-2026-41511

    OpenMcdf has an Infinite loop DoS via crafted CFB directory cycle

    OpenMcdf is a fully .NET / C# library to manipulate Compound File Binary File Format files, also known as Structured Storage. Prior to version 3.1.3, OpenMcdf does not detect cycles in the directory entry red-black tree of a Compound File Binary (CFB) documen…

    ironfede openmcdf OpenMcdf NuGet