Heap Out-of-Bounds Read in libfwsi Affecting Multiple Applications

CVE-2026-111134

What is CVE-2026-111134?

The libfwsi library, used for managing MTP file entries, is susceptible to a heap out-of-bounds read vulnerability in the libfwsi_mtp_file_entry_values_read_data() function. This flaw allows attackers to read content beyond the allocated buffer by crafting specially designed MTP file entry shell items. Attackers can exploit this vulnerability by embedding a shell item with a size of 10 to 73 bytes and an item data size of 44 or more into .lnk files, jump lists, or shell bags. Successful exploitation can lead to crashes of applications that consume libfwsi, posing significant risks for users.

References