AZL-108393
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-108393.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-108393
- Upstream
- Published
- 2026-10-14T15:17:11Z
- Modified
- 2026-10-19T05:35:54Z
- Summary
- CVE-2026-110602 affecting package libmspack 0.11alpha-1
- Details
-
libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajd_open() in mspack/kwajd.c that frees unzeroed filename and extra pointers on header read errors. Attackers can supply a truncated, empty, or wrong-signature KWAJ file to crash the process or obtain an arbitrary-free memory corruption primitive.
- References