Libpff Project - vulnerabilities (CVEs)

6 CVEs in 1 products, 3 in the last 30 days, newest from 2026-10-26.

Products

CVE-2026-116736 - CVSS 6.9 (medium), 2026-10-26: Libpff through 20260926 contains a heap out-of-bounds read vulnerability in libpff_table_read_values_array because a 7c column definition's values_array_size…
CVE-2026-116735 - CVSS 6.9 (medium), 2026-10-26: libpff through 20260926 contains an off-by-one bounds check in libpff_table_read_6c_record_entries that allows attackers to trigger a heap out-of-bounds read…
CVE-2026-110598 - CVSS 6.9 (medium), 2026-10-14: Libyal libpff through 20260926 contains an integer underflow in libpff_record_entry_get_multi_value() that allows attackers to trigger heap out-of-bounds…
CVE-2020-18897 - CVSS 7.8 (high), 2021-08-19: An use-after-free vulnerability in the libpff_item_tree_create_node function of libyal Libpff before 20180623 allows attackers to cause a denial of service…
CVE-2018-20348 - CVSS 5.5 (medium), 2018-12-22: libpff_item_tree_create_node in libpff_item_tree.c in libpff before experimental-20180714 allows attackers to cause a denial of service (infinite recursion)…
CVE-2018-11723 - CVSS 5.5 (medium), 2018-06-19: The libpff_name_to_id_map_entry_read function in libpff_name_to_id_map.c in libyal libpff through 2018-04-28 allows remote attackers to cause an information…