Vulnerability DatabaseCVE-2026-116743
Mend.io Vulnerability Database
The largest open source vulnerability database
What is a Vulnerability ID?
New vulnerability? Tell us about it!
CVE-2026-116743
Published:October 26, 2026
Updated:November 04, 2026
libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecf_url_values_read_data() that allows attackers to corrupt heap memory via crafted partial URL records. Attackers can supply a crafted MSIE cache index.dat file whose recovered partial record has an oversized unknown_offset, crashing forensic tools processing it.
Related Resources (8)
https://www.vulncheck.com/advisories/libyal-libmsiecf-through-20260525-double-free-via-libmsiecf-url-values-read-data
https://github.com/libyal/libmsiecf/blob/20260525/libmsiecf/libmsiecf_url_values.c#L824
https://github.com/libyal/libmsiecf/issues/6
https://nvd.nist.gov/vuln/detail/CVE-2026-116743
https://github.com/libyal/libmsiecf
https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/116xxx/CVE-2026-116743.json
https://hackmd.io/@haindpwn/libmsiecf-url-record-partial-recovery-double-free
https://github.com/libyal/libmsiecf/commit/a99a703d190d62f6c21b6225cf84ce80037e45d5
Do you need more information?
Contact Us
CVSS v4
Base Score:
6.8
Attack Vector
LOCAL
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
NONE
User Interaction
PASSIVE
Vulnerable System Confidentiality
NONE
Vulnerable System Integrity
NONE
Vulnerable System Availability
HIGH
Subsequent System Confidentiality
NONE
Subsequent System Integrity
NONE
Subsequent System Availability
NONE
CVSS v3
Base Score:
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Weakness Type (CWE)
Double Free
CWE-415
EPSS
Base Score:
0.13