Heap Out-of-Bounds Read Vulnerability in libfwsi by libyal
CVE-2026-111135
6.9MEDIUM
What is CVE-2026-111135?
The vulnerability in libfwsi arises from its libfwsi_mtp_volume_values_read_data() function, which allows attackers to exploit crafted MTP volume shell items. By embedding a shell item of size between 10 to 53 bytes with specific item data sizes, an attacker can read past the buffer limits. This could lead to crashes in any processes consuming the affected data, thereby creating significant security risks.
Affected Version(s)
libfwsi 0 <= 20260522
References
CVSS V4
Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown
Timeline
Vulnerability published
Vulnerability Reserved
Credit
HaiND from the Post and Telecommunication Institute of Technology