Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-119602— libmspack through 0.11alpha Uninitialized Memory Disclosure via MS-ZIP Decompressor Window

Quick assessment

Affected
kyz libmspack
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

libmspack 0.11alpha 及更早版本中的 MS-ZIP 解压器存在未初始化内存泄露漏洞。攻击者可通过利用未校验的后向引用距离，泄露堆内存数据。具体而言，攻击者可构造一个 MS-ZIP CAB 文件，使其第一个数据块以一条后向引用开头，从而诱导 函数将多达 32 KiB 的旧堆内存写入解压输出中。

CVSS 3.7 · Low

Possible ATT&CK Techniques 1 AI

T1069 · Permission Groups Discovery
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-119602

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
libmspack through 0.11alpha Uninitialized Memory Disclosure via MS-ZIP Decompressor Window
Source: CVE Program / CVE List V5
Vulnerability Description
libmspack through 0.11alpha contains an uninitialized memory disclosure vulnerability in the MS-ZIP decompressor that allows attackers to leak heap data via unchecked back-reference distances. Attackers can supply a crafted MS-ZIP CAB file whose first block begins with a back-reference, causing cabd->extract() to write up to 32 KiB of stale heap memory into extracted output.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
对未经初始化资源的使用
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
kyz libmspack 0 ~ 0.11alpha -

II. Public POCs for CVE-2026-119602

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-119602

请登录查看更多情报信息。

Other References for CVE-2026-119602 (5)

IV. Related Vulnerabilities

Same product: libmspack
Same vendor: kyz
Same weakness: CWE-908