CVE-2026-116743 Details
Description
libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecf_url_values_read_data() that allows attackers to corrupt heap memory via crafted partial URL records. Attackers can supply a crafted MSIE cache index.dat file whose recovered partial record has an oversized unknown_offset, crashing forensic tools processing it.
A double free vulnerability has been identified in libyal libmsiecf versions through 20260525. The issue arises in the function libmsiecf_url_values_read_data(), where partial URL records with an oversized unknown_offset can lead to heap memory corruption. This vulnerability can be exploited by crafting a malicious MSIE cache index.dat file, which, when processed by forensic tools, causes a crash.
Users can upgrade to libyal libmsiecf version 20261022 or later, where this vulnerability has been addressed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 26, 2026CISA-ADP
Assessed Nov 5, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://hackmd.io/@haindpwn/libmsiecf-url-record-partial-recovery-double-free | CISA-ADP | ExploitTechnical Analysis |
| https://github.com/libyal/libmsiecf | [email protected] | Vendor |
| https://github.com/libyal/libmsiecf/blob/20260525/libmsiecf/libmsiecf_url_values.c#L824 | [email protected] | Source CodeVendor |
| https://github.com/libyal/libmsiecf/commit/a99a703d190d62f6c21b6225cf84ce80037e45d5 | [email protected] | Source CodeVendor |
| https://github.com/libyal/libmsiecf/issues/6 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://hackmd.io/@haindpwn/libmsiecf-url-record-partial-recovery-double-free | [email protected] | ExploitTechnical Analysis |
| https://www.vulncheck.com/advisories/libyal-libmsiecf-through-20260525-double-free-via-libmsiecf-url-values-read-data | [email protected] | AdvisoryBundle |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-415 | Double Free | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| libyal libmsiecf | <= 20260525 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 5, 2026 | CVE Modified | CISA-ADP |
| Oct 26, 2026 | New CVE Received | [email protected] |