CVE-2026-116743— libyal libmsiecf through 20260525 Double Free via libmsiecf_url_values_read_data

Quick assessment

Affected

libyal libmsiecf

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

libyal 项目中的 libmsiecf 组件（截至 2026 年 5 月 25 日版本）在函数中存在双重释放（double free）漏洞。攻击者可利用构造的不完整 URL 记录，通过该漏洞破坏堆内存。具体而言，攻击者可提供经过篡改的 MSIE 缓存文件，使其恢复出的不完整记录包含一个过大的值，从而导致处理该文件的取证工具发生崩溃。

CVSS 5.5 · Medium Updated Oct 27, 2026

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

libyal libmsiecf through 20260525 Double Free via libmsiecf_url_values_read_data

Source: CVE Program / CVE List V5

Vulnerability Description

libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecf_url_values_read_data() that allows attackers to corrupt heap memory via crafted partial URL records. Attackers can supply a crafted MSIE cache index.dat file whose recovered partial record has an oversized unknown_offset, crashing forensic tools processing it.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

双重释放

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
libyal	libmsiecf	0 ~ 20260525	-

II. Public POCs for CVE-2026-116743

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-116743

请登录查看更多情报信息。

Other References for CVE-2026-116743 (6)

https://github.com/libyal/libmsiecf product
https://github.com/libyal/libmsiecf/commit/a99a703d190d62f6c21b6225cf84ce80037e45d5 patch
https://hackmd.io/@haindpwn/libmsiecf-url-record-partial-recovery-double-free third-party-advisory
https://github.com/libyal/libmsiecf/blob/20260525/libmsiecf/libmsiecf_url_values.c#L824 technical-description
https://github.com/libyal/libmsiecf/issues/6 issue-tracking
https://www.vulncheck.com/advisories/libyal-libmsiecf-through-20260525-double-free-via-libmsiecf-url-values-read-data third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-116743

Same Patch Batch · libyal · 2026-10-26 · 6 CVEs total

CVE-2026-116737	6.1 MEDIUM	libphdi through 20260902 Heap Out-of-Bounds Read via Extent Data File Path
CVE-2026-116735	6.1 MEDIUM	libpff through 20260926 Heap Out-of-Bounds Read via libpff_table_read_6c_record_entries
CVE-2026-116736	6.1 MEDIUM	libpff through 20260926 Heap Out-of-Bounds Read via libpff_table_read_values_array
CVE-2026-116728	5.5 MEDIUM	libfvde through 20260923 Heap Out-of-Bounds Read via libfvde_encrypted_metadata_read_type_
CVE-2026-116729	3.3 LOW	libfvde through 20260923 Heap Out-of-Bounds Read via libfvde_encrypted_metadata_read_type_

IV. Related Vulnerabilities

Same vendor: libyal

Same weakness: CWE-415