Heap Out-of-Bounds Read Vulnerability in Libpff by Libyal
CVE-2026-116736

6.9MEDIUM

Key Information:

Vendor

Libyal

Status
Libpff
Vendor
CVE Published:
26 October 2026

What is CVE-2026-116736?

Libpff, up to version 20260926, is susceptible to a heap out-of-bounds read vulnerability within the function libpff_table_read_values_array. This occurs because the values_array_size from a 7c column definition is not adequately validated against the remaining size of the buffer. Attackers can exploit this flaw by providing specially crafted PST, OST, or PAB files, which can lead applications to read unintended adjacent memory locations, potentially exposing sensitive information or causing application crashes.

Affected Version(s)

libpff 0 <= 20260926

References

https://github.com/libyal/libpff/issues/172
issue-tracking
https://github.com/libyal/libpff
product
https://github.com/libyal/libpff/commit/cb83eb38ffdbdfe2c...
patch

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

HaiND from the Post and Telecommunication Institute of Technology
.