Skip to content
Llibyal
Products
| Product | CVEs | Exploited | Latest |
| libpff | 3 | – | Oct 26, 2026 |
| libfwsi | 2 | – | Oct 15, 2026 |
| libfvde | 2 | – | Oct 26, 2026 |
| libmsiecf | 1 | – | Oct 26, 2026 |
| libphdi | 1 | – | Oct 26, 2026 |
| libregf | 1 | – | Oct 15, 2026 |
| libesedb | 1 | – | Oct 15, 2026 |
| libvmdk | 1 | – | Nov 5, 2026 |
| libewf | 1 | – | Oct 15, 2026 |
| libfsapfs | 1 | – | Oct 15, 2026 |
Exploited and recent CVEs
-
CVE-2026-123268
Low 3.5
libyal libvmdk Extent Data File libvmdk_extent_table.c libvmdk_extent_table_get_extent_data_file_path memory corruption
0.2%
-
CVE-2026-116743
Medium 5.5
libyal libmsiecf through 20260525 Double Free via libmsiecf_url_values_read_data
0.1%
-
CVE-2026-116737
Medium 6.1
libphdi through 20260902 Heap Out-of-Bounds Read via Extent Data File Path
0.1%
-
CVE-2026-116736
Medium 6.1
libpff through 20260926 Heap Out-of-Bounds Read via libpff_table_read_values_array
0.1%
-
CVE-2026-116735
Medium 6.1
libpff through 20260926 Heap Out-of-Bounds Read via libpff_table_read_6c_record_entries
0.1%
-
CVE-2026-116729
Low 3.3
libfvde through 20260923 Heap Out-of-Bounds Read via libfvde_encrypted_metadata_read_type_0x001a
0.1%
-
CVE-2026-116728
Medium 5.5
libfvde through 20260923 Heap Out-of-Bounds Read via libfvde_encrypted_metadata_read_type_0x0024
0.1%
-
CVE-2026-111159
Medium 6.1
libewf through 20260924 Heap Out-of-Bounds Read via L01 Extended Attribute Parsing
0.1%
-
CVE-2026-111147
Medium 6.1
Libyal libesedb through 20260704 Heap Out-of-Bounds Read via libesedb_record_get_multi_value
0.1%
-
CVE-2026-111140
Medium 6.1
libregf through 20260526 Heap Out-of-Bounds Read via libregf_value_item_read_value_data
0.1%
-
CVE-2026-111135
Medium 6.1
libfwsi through 20260522 Heap Out-of-Bounds Read via libfwsi_mtp_volume_values_read_data
0.2%
-
CVE-2026-111134
Medium 6.1
libfwsi through 20260522 Heap Out-of-Bounds Read via libfwsi_mtp_file_entry_values_read_data
0.1%
-
CVE-2026-111133
Medium 6.1
libfsapfs through 20260921 Heap Out-of-Bounds Read via libfsapfs_key_encrypted_key_read_data
0.2%
-
CVE-2026-110598
Medium 6.1
Libyal libpff through 20260926 heap out-of-bounds read via libpff_record_entry_get_multi_value
0.2%