CVE-2026-110598 Details

A heap out-of-bounds read vulnerability has been identified in Libyal Libpff versions through 20260926. This issue arises from an integer underflow in the function 'libpff_record_entry_get_multi_value()', which processes multi-valued properties in PST, OST, or PAB files. Attackers can exploit this vulnerability by crafting files with non-monotonic offset values, leading to a denial-of-service condition and potential exposure of adjacent heap memory.

The vulnerability can be fixed by adding a check to ensure that multi-value offsets are monotonically increasing before processing them. This prevents the integer underflow that leads to the out-of-bounds read. After applying this fix, it's important to test the library with a similar crafted property to ensure the vulnerability is effectively addressed.