CVE Feed

    Dashboard / CVE / CVE-2026-111147

    CVE-2026-111147

    Libyal libesedb through 20260704 contains a heap out-of-bounds read vulnerability in libesedb_record_get_multi_value() that allows attackers to read past buffers via unbounded multi-value offset tables. Attackers can supply a crafted ESE/EDB database processed by esedbexport to crash the application or expose up to about 32 KiB of adjacent heap memory.

    Published:Oct 15, 2026
    Last Modified:Oct 27, 2026
    EPS:Oct 15, 2026
    EPSS Score:0.00127
    CVSS Score:6.1

    Affected Products

    Vendor
    Libesedb Project
    Product
    Libesedb
    Vendor
    Libyal
    Product
    Libesedb

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-125 Out-of-bounds Read

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-540 Overread Buffers

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High