CVE-2026-111147— Libyal libesedb through 20260704 Heap Out-of-Bounds Read via libesedb_record_get_multi_value
Quick assessment
Affected
libyal libesedb
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Libyal libesedb 20260704 及之前版本中，libesedb_record_get_multi_value() 函数存在堆缓冲区越界读取漏洞，该漏洞允许攻击者通过未加边界检查的多值偏移表读取超出缓冲区的内存。攻击者可构造恶意的 ESE/EDB 数据库文件，经由 esedbexport 工具处理时，可导致应用程序崩溃，或泄露最多约 32 KiB 的相邻堆内存数据。
Possible ATT&CK Techniques 1 AI
T1059 · Command and Scripting Interpreter
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-111147
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Libyal libesedb through 20260704 Heap Out-of-Bounds Read via libesedb_record_get_multi_value
Source: CVE Program / CVE List V5
Vulnerability Description
Libyal libesedb through 20260704 contains a heap out-of-bounds read vulnerability in libesedb_record_get_multi_value() that allows attackers to read past buffers via unbounded multi-value offset tables. Attackers can supply a crafted ESE/EDB database processed by esedbexport to crash the application or expose up to about 32 KiB of adjacent heap memory.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存读
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-111147
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-111147
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-111147 (1)
Security Blog Posts for CVE-2026-111147 (1)
-
🔗 libesedb 20260704: heap out-of-bounds read from an unbounded multi-value offset table - HackMD Read full article technical-description exploit
Other References for CVE-2026-111147 (1)
Same Patch Batch · libyal · 2026-10-15 · 6 CVEs total
| CVE-2026-111159 | 6.1 MEDIUM | libewf through 20260924 Heap Out-of-Bounds Read via L01 Extended Attribute Parsing |
| CVE-2026-111140 | 6.1 MEDIUM | libregf through 20260526 Heap Out-of-Bounds Read via libregf_value_item_read_value_data |
| CVE-2026-111135 | 6.1 MEDIUM | libfwsi through 20260522 Heap Out-of-Bounds Read via libfwsi_mtp_volume_values_read_data |
| CVE-2026-111134 | 6.1 MEDIUM | libfwsi through 20260522 Heap Out-of-Bounds Read via libfwsi_mtp_file_entry_values_read_da |
| CVE-2026-111133 | 6.1 MEDIUM | libfsapfs through 20260921 Heap Out-of-Bounds Read via libfsapfs_key_encrypted_key_read_da |
IV. Related Vulnerabilities
Same vendor: libyal
-
CVE-2026-111159
libewf through 20260924 Heap Out-of-Bounds Read via L01 Exte -
CVE-2026-111140
libregf through 20260526 Heap Out-of-Bounds Read via libregf -
CVE-2026-111135
libfwsi through 20260522 Heap Out-of-Bounds Read via libfwsi -
CVE-2026-111134
libfwsi through 20260522 Heap Out-of-Bounds Read via libfwsi -
CVE-2026-111133
libfsapfs through 20260921 Heap Out-of-Bounds Read via libfs
Same weakness: CWE-125
-
CVE-2026-111677
Antiword through 0.37 Heap Out-of-Bounds Read via vGet8LstIn -
CVE-2026-111678
Antiword through 0.37 Stack Out-of-Bounds Read via prop8.c F -
CVE-2026-49868
RIOT: DHCPv6 client _parse_reply() missing sub-option length -
CVE-2026-68906
libIEC61850: Infinite loop and out-of-bounds read in ACSE pa -
CVE-2026-68907
libIEC61850: Server-side out-of-bounds stack read in associa
V. Comments for CVE-2026-111147
No comments yet