CVE-2026-111158 Details
Description
EarthScope libmseed through 3.5.4 contains a heap out-of-bounds read vulnerability in ms3_detect() in parseutils.c that reads past truncated miniSEED 2 record buffers. Attackers can supply a 40 to 47 byte buffer passing MS2_ISVALIDHEADER to msr3_parse() or ms3_detect(), over-reading up to 8 bytes and potentially crashing the process.
A heap out-of-bounds read vulnerability has been identified in EarthScope libmseed versions through 3.5.4. The issue resides in the 'ms3_detect()' function within 'parseutils.c', where the vulnerability allows reading past the end of truncated miniSEED 2 record buffers. Attackers can exploit this by supplying a buffer between 40 to 47 bytes that passes validation checks, leading to an over-read of up to 8 bytes. This exploitation can potentially crash the process.
The vulnerability has been fixed in commit 'c93a36a' by adding a proper length check before reading the blockette offset, ensuring that the 'ms3_detect()' function does not read past the end of the buffer.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 15, 2026CISA-ADP
Assessed Oct 15, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-125 | Out-of-bounds Read | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| EarthScope libmseed | <= 3.5.4 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 15, 2026 | CVE Modified | CISA-ADP |
| Oct 15, 2026 | New CVE Received | [email protected] |