CVE-2026-111140
- Source
- https://cve.org/CVERecord?id=CVE-2026-111140
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-111140.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-111140
- Downstream
- Published
- 2026-10-15T18:57:32Z
- Modified
- 2026-10-17T07:06:56Z
- Severity
-
- 6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator
- Summary
- libregf through 20260526 Heap Out-of-Bounds Read via libregf_value_item_read_value_data
- Details
-
libregf through 20260526 contains a heap out-of-bounds read in libregf_value_item_read_value_data() because it bounds value data size without subtracting the 4-byte old-format cell offset. Attackers can supply a crafted version 1.0/1.1 REGF hive with a value data cell ending its hive bin to leak adjacent heap bytes or crash parsers like regfexport and plaso.
- Database specific
{ "cna_assigner": "VulnCheck", "cwe_ids": [ "CWE-125" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/111xxx/CVE-2026-111140.json" }- References
-
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/111xxx/CVE-2026-111140.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-111140
- https://www.vulncheck.com/advisories/libregf-through-20260526-heap-out-of-bounds-read-via-libregf-value-item-read-value-data
- https://github.com/libyal/libregf
- https://github.com/libyal/libregf/blob/1a4bd856484263caa4a5e0d6ba377c3dc69150c7/libregf/libregf_value_item.c#L789-L935
- https://hackmd.io/@haind-pwn/libregf-value-data-offset-oob-read
Affected packages
Git / github.com/libyal/libregf
Affected ranges
- Type
- GIT
- Repo
- https://github.com/libyal/libregf
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
- Database specific
-
Show details
{ "extracted_events": [ { "introduced": "0" }, { "last_affected": "20260526" }, { "fixed": "20260526" } ], "source": [ "AFFECTED_FIELD", "DESCRIPTION" ] }
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-111140.json"
vanir_signatures
[
{
"deprecated": false,
"digest": {
"function_hash": "253011472845339062079269467916946409142",
"length": 2151
},
"id": "CVE-2026-111140-00a65286",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "libregf/libregf_named_key.c",
"function": "libregf_named_key_compare_name_with_utf16_string"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "153239273791821936572511256027561080565",
"length": 1019
},
"id": "CVE-2026-111140-02bf387f",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "libregf/libregf_value_key.c",
"function": "libregf_value_key_get_utf8_name"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "113589135037903999885953470090041863421",
"length": 719
},
"id": "CVE-2026-111140-0677709b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "libregf/libregf_key_item.c",
"function": "libregf_key_item_get_utf16_class_name_size"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "192853757917294893965094234033385082837",
"length": 2147
},
"id": "CVE-2026-111140-08e68f5b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "libregf/libregf_named_key.c",
"function": "libregf_named_key_compare_name_with_utf8_string"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"135690324688050730376313153172411432121",
"649201216851494088031130439427171775",
"143577260499395461755896105076395071343",
"201699097061769022238016807452058321889",
"293451939505045659574617527834331496300",
"19413555236645558101768001161066770847",
"278655266792106220172551612241577842941",
"90878425398801556936846247112417289070",
"178905603730927915747397643619398748519",
"208005505337771820787953207541571843050",
"77464386595295886080417519997402063893",
"245841377840644563660268649127408798714",
"80415218901198825741736581541269079253",
"64041705597775664930410542588657146745",
"256090227383262937339135362232532903275",
"232594330281208154631036953995761491699",
"289378422735500639776553692306946548027",
"89191439678292473473917694772153507172",
"4229615331377047772207565971244817584",
"318485027858146418624528096381481209091",
"79039805015104389819313080145399412273",
"201699097061769022238016807452058321889",
"295085901827034456457177549707933932473",
"27130874466337760197780811521484636073",
"259980035782060372729710499435286011867",
"236693245852473414102881938218139779916",
"5685143157397139891353817133933459168",
"180789870706187252003425233269629763600",
"304519176085246441697666480990241014954",
"113446932492926453395280073827568772959",
"269130592944365247833358929941509864993",
"106536620979043809807648311206109579228",
"87708616618532872197671908918743243489",
"318485027858146418624528096381481209091",
"79039805015104389819313080145399412273",
"201699097061769022238016807452058321889",
"135690324688050730376313153172411432121",
"649201216851494088031130439427171775",
"143577260499395461755896105076395071343",
"201699097061769022238016807452058321889",
"135690324688050730376313153172411432121",
"649201216851494088031130439427171775",
"143577260499395461755896105076395071343",
"201699097061769022238016807452058321889"
],
"threshold": 0.9
},
"id": "CVE-2026-111140-0d182e11",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "libregf/libregf_named_key.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"168569333018920161113067730213869752304",
"133171213585473786017985449898699876645",
"332650741293258725754165999069672314158",
"2499433925567404464680199721089372452",
"65114286134008628490661323645910313341",
"263679324112924801892362899131380705173",
"105733522476428343501623360152514803884",
"207138023680062550596382170452690709476",
"269305936006961268897250084280323138537",
"232521321063841937392763144232718922299",
"94295439548466460146114693440937520988",
"166180899360760523455529292830863157488",
"138109298475185901523618942290262723039",
"90878425398801556936846247112417289070",
"60457073025642798846030225263226282961",
"153727512643849906822705183723482527868",
"151078901337523793224185736798630929094",
"106948402368206915207549509747973406122",
"331323330595493467392825497128963483196",
"447197363254124176959466041736940303",
"66135873282325780929947038943415369061",
"145405901123371043402610572363371803188",
"72086743845470978977471530624661076684",
"200581225250796094073917348351703469005",
"88621541424790278880696673749067546013",
"166180899360760523455529292830863157488",
"138109298475185901523618942290262723039",
"90878425398801556936846247112417289070"
],
"threshold": 0.9
},
"id": "CVE-2026-111140-18b24b3f",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "libregf/libregf_multi_string.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"107413750203203894662935217455595897966",
"205959111437896074732321097115094777437",
"337085936200401412868136965379341847071",
"312142113735961046536773327162136700884",
"170961600146843268425932857031631483260",
"331807681902943486897273158059662114098",
"312041930586964517929996449218451357399",
"326719049346544442497369267787753933424",
"217701031206281224874264371100280095647",
"76159456076021229656977947317982665280",
"43349830832203215711735875125005833113",
"170961600146843268425932857031631483260",
"331807681902943486897273158059662114098",
"312041930586964517929996449218451357399",
"326719049346544442497369267787753933424",
"217701031206281224874264371100280095647",
"76159456076021229656977947317982665280",
"6375822506950439666466518444649317672"
],
"threshold": 0.9
},
"id": "CVE-2026-111140-1d0c3b8a",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "pyregf/pyregf_multi_string.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "154662122501084936888278923163331967775",
"length": 1502
},
"id": "CVE-2026-111140-278841bd",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "libregf/libregf_multi_string.c",
"function": "libregf_multi_string_get_utf16_string_size"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "188223833129113461172793493646508609975",
"length": 5972
},
"id": "CVE-2026-111140-2a10408c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "libregf/libregf_value_item.c",
"function": "libregf_value_item_read_value_data"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "256325547485354847731466626154998235003",
"length": 1412
},
"id": "CVE-2026-111140-300ade46",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "libregf/libregf_value_item.c",
"function": "libregf_value_item_get_value_utf8_string"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "196453620775459733414470100764583329612",
"length": 809
},
"id": "CVE-2026-111140-3551c36d",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "libregf/libregf_named_key.c",
"function": "libregf_named_key_get_utf16_name_size"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "102132084059801344793828024350636521940",
"length": 807
},
"id": "CVE-2026-111140-358e9d2b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "libregf/libregf_named_key.c",
"function": "libregf_named_key_get_utf8_name_size"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "303694061516851163161186136216648191486",
"length": 1021
},
"id": "CVE-2026-111140-35e0f0e2",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "libregf/libregf_value_key.c",
"function": "libregf_value_key_get_utf16_name"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "62819766404656198257545324891448902337",
"length": 1044
},
"id": "CVE-2026-111140-5b9bc122",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "libregf/libregf_value_key.c",
"function": "libregf_value_key_get_utf16_name_size"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "60720212442330983613741839489396495082",
"length": 2588
},
"id": "CVE-2026-111140-5fe31a8e",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "libregf/libregf_key_item.c",
"function": "libregf_key_item_read_class_name_data"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "335819534518449693689958585907311583612",
"length": 1041
},
"id": "CVE-2026-111140-6894bb73",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "libregf/libregf_value_key.c",
"function": "libregf_value_key_get_utf8_name_size"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "132418608077490711329608930946145234098",
"length": 1509
},
"id": "CVE-2026-111140-6e22eca1",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "libregf/libregf_multi_string.c",
"function": "libregf_multi_string_get_utf8_string"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "156382857466364009910227402168414948329",
"length": 1629
},
"id": "CVE-2026-111140-74926f9c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "libregf/libregf_value_item.c",
"function": "libregf_value_item_get_value_utf16_string_size"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "318953427935964414361568490285234335352",
"length": 829
},
"id": "CVE-2026-111140-76dbc367",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "libregf/libregf_named_key.c",
"function": "libregf_named_key_get_utf16_name"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "127366636319574380193898059786005525412",
"length": 1500
},
"id": "CVE-2026-111140-804ff59f",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "libregf/libregf_multi_string.c",
"function": "libregf_multi_string_get_utf8_string_size"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "208256365409623813276662181338451421101",
"length": 1511
},
"id": "CVE-2026-111140-819dbbed",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "libregf/libregf_multi_string.c",
"function": "libregf_multi_string_get_utf16_string"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "289381841251417239925337734383354500470",
"length": 8957
},
"id": "CVE-2026-111140-8221c942",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "libregf/libregf_value_key.c",
"function": "libregf_value_key_read_data"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "207970078891292683559987530924074965518",
"length": 1833
},
"id": "CVE-2026-111140-8370a2ff",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "libregf/libregf_value_key.c",
"function": "libregf_value_key_compare_name_with_utf8_string"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "272974733647103337404577172114828473031",
"length": 1836
},
"id": "CVE-2026-111140-83ede26b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "libregf/libregf_value_key.c",
"function": "libregf_value_key_compare_name_with_utf16_string"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "163939320153970683995844344406364458189",
"length": 717
},
"id": "CVE-2026-111140-97fdf848",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "libregf/libregf_key_item.c",
"function": "libregf_key_item_get_utf8_class_name_size"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"107413750203203894662935217455595897966",
"157980909078885175092934523452969989139",
"160411416101229482721289557403409481972",
"177549741758843516929128279909553703320",
"170961600146843268425932857031631483260",
"331807681902943486897273158059662114098",
"312041930586964517929996449218451357399",
"326719049346544442497369267787753933424",
"217701031206281224874264371100280095647",
"76159456076021229656977947317982665280",
"43349830832203215711735875125005833113",
"170961600146843268425932857031631483260",
"331807681902943486897273158059662114098",
"23155496258735880601505111386282758670",
"320825070512771086612738084195149588653",
"62504958946025296257993594042841543762",
"326801717529232868727373591114720624046",
"287332343747071113149944627854262322094"
],
"threshold": 0.9
},
"id": "CVE-2026-111140-989007f2",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "pyregf/pyregf_value.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "75449721705500795601572706230177042129",
"length": 1455
},
"id": "CVE-2026-111140-99b54fe3",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "pyregf/pyregf_multi_string.c",
"function": "pyregf_multi_string_iternext"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "322317299606109035532677984730059499151",
"length": 1325
},
"id": "CVE-2026-111140-9a71f195",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "pyregf/pyregf_multi_string.c",
"function": "pyregf_multi_string_getitem"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"3893788356863642267734360990720638994",
"122309087261024845028341267216640281393",
"254860602736366038120889939555103805550",
"309916747822642416944604940452062669915",
"141362824341786874065161946817070261569",
"168990949981414171656591911442134036534",
"209196861678524745782858569978717972656",
"123042337166718861125378078872647454945",
"70622254889704592504008251346706914554",
"55192203568652503674044929168672209345",
"197373956005419432095372036484673558712",
"311196441873813800047896661452324894152",
"318410109266950222106787126100695872811",
"144057661215797973243651697914217028312",
"307889526589990740895817342025341409690",
"159636905407957713072139918779364344985",
"120266713843560266465144168496387217039",
"49715644667086925475207952708970445986",
"213780351143478582283481262377581171902",
"81354176956886080458234321628361925348",
"95852245216816020778565507385362712813",
"314454283372634285311814522413115070064",
"105733522476428343501623360152514803884",
"111468089106755088707749742652989610596",
"117098252825123059292000474321915597979",
"188789184517902478112256349588959264894",
"301709256131780516909107031800361968632",
"269644790965740937245568160051978652740",
"91322051493285896367194703739529768144",
"90878425398801556936846247112417289070",
"285580101756270542625174686361103291236",
"186586394368380815618724247912433718874",
"155168472615272188791851658826456268046",
"193039392654979734604934386390207842429",
"240899703880302805608101232739761866553",
"84257099642553669904840367611763486267",
"66135873282325780929947038943415369061",
"287708954736296587557498710242015005572",
"102448160228208149582785851287605400682",
"93554393150239060433663567975448238576",
"121590833969522144025689546057195418688",
"269644790965740937245568160051978652740",
"91322051493285896367194703739529768144",
"90878425398801556936846247112417289070"
],
"threshold": 0.9
},
"id": "CVE-2026-111140-a26b7f65",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "libregf/libregf_value_item.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "111517898982481326253169519093842104805",
"length": 9462
},
"id": "CVE-2026-111140-a62e84d8",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "libregf/libregf_named_key.c",
"function": "libregf_named_key_read_data"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "264184066199108930473902342130557897036",
"length": 1626
},
"id": "CVE-2026-111140-b8ae4650",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "libregf/libregf_value_item.c",
"function": "libregf_value_item_get_value_utf8_string_size"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"264805990787890648013610281825226986792",
"29194413588528932329537599132891935773",
"58785914338037258954170656509615359215",
"203624953959803596679577451220782757633",
"170961600146843268425932857031631483260",
"331807681902943486897273158059662114098",
"312041930586964517929996449218451357399",
"326719049346544442497369267787753933424",
"217701031206281224874264371100280095647",
"76159456076021229656977947317982665280",
"43349830832203215711735875125005833113",
"170961600146843268425932857031631483260",
"331807681902943486897273158059662114098",
"312041930586964517929996449218451357399",
"326719049346544442497369267787753933424",
"217701031206281224874264371100280095647",
"76159456076021229656977947317982665280",
"43349830832203215711735875125005833113"
],
"threshold": 0.9
},
"id": "CVE-2026-111140-ba3a9915",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "pyregf/pyregf_key.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"78211204130503252268839929555250540586",
"110271622276683355115474098458523691677",
"143577260499395461755896105076395071343",
"201699097061769022238016807452058321889",
"338719149849256035998736718378951937757",
"121206599714204116464913537802487433123",
"52076666467514752065859140424951264797",
"90878425398801556936846247112417289070",
"57701284142035536076842977099590892908",
"219233598516645157049703055138048691113",
"85807261818204789928738993666559927570",
"105279373753586058395901430633991565075",
"20196788440560128063740405427415255947",
"122568572416850368024346727258068447580",
"128108362494583168738239914543450097001",
"49006613542277505889678517191638988434",
"301459937874734669307402503972523682459",
"105808230464195638460550627993951720205",
"195727907971344628972122013751338134607",
"238772754641469512043311642554836552610",
"182220363517119287925169554978156352413",
"201699097061769022238016807452058321889",
"219102526303829563325163124704923824117",
"248179973215314863391161738881413469275",
"155602067546822221057703734237263660342",
"250891244859271219404099059098534966976",
"314149207103537938686555285962325710612",
"62079201826567070419802378330664947676",
"20563882634371968211130040407509883754",
"161438118593810684553504643649886170441",
"194252375218364639705223524302506158341",
"149781100996232314483190115336537072094",
"27878790166177458567639444840533782079",
"238772754641469512043311642554836552610",
"182220363517119287925169554978156352413",
"201699097061769022238016807452058321889",
"78211204130503252268839929555250540586",
"110271622276683355115474098458523691677",
"143577260499395461755896105076395071343",
"201699097061769022238016807452058321889",
"78211204130503252268839929555250540586",
"110271622276683355115474098458523691677",
"143577260499395461755896105076395071343",
"201699097061769022238016807452058321889"
],
"threshold": 0.9
},
"id": "CVE-2026-111140-be6a1a34",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "libregf/libregf_value_key.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "231751461166309750316023798503528192011",
"length": 727
},
"id": "CVE-2026-111140-d07609cd",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "libregf/libregf_key_item.c",
"function": "libregf_key_item_get_utf8_class_name"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "117401408571022740159928131180187695282",
"length": 1414
},
"id": "CVE-2026-111140-d2df1c6e",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "libregf/libregf_value_item.c",
"function": "libregf_value_item_get_value_utf16_string"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "259323701910640099538561365765066932938",
"length": 827
},
"id": "CVE-2026-111140-d7d3ddde",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "libregf/libregf_named_key.c",
"function": "libregf_named_key_get_utf8_name"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "87891505192747057885686842857651321554",
"length": 729
},
"id": "CVE-2026-111140-d829ee99",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "libregf/libregf_key_item.c",
"function": "libregf_key_item_get_utf16_class_name"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"128562985219218757523311314845996266945",
"227600496716951591690890332492667267297",
"118306284563951401268176763471323434961",
"90878425398801556936846247112417289070",
"107915091406628319904786263099682879424",
"143110271609084389609417321268323747449",
"311924108687562531540074394728082681764",
"290348695823360143403993782209205274159",
"108599897053546397547507891409959752031",
"56567542235414793006212931313874963105",
"15587615778390165298188314268416314434",
"108935768922310364312480924152392016233",
"65243393786202255587881799473469458728",
"42485384714017532081898448422749163633",
"97504972293926025753766874577247346347",
"301917940049678747699333154540372184792",
"258807627877349568295860175818315615995",
"105733522476428343501623360152514803884",
"141019002916057742592555551458995671954",
"142953425126230811038911667108584571171",
"138478684084408446186056094802540693275",
"22344431503558553652894961701223106600",
"16118759476324904666013372399336843023",
"320023715272521202365207299345506979703",
"924853717317333567884622361405435956",
"298779101631583967791566431006811641941",
"277216576103185617031354006774805261021",
"154580088077298458904266406004007129132",
"29888312882439628758848102014471971871",
"227600496716951591690890332492667267297",
"118306284563951401268176763471323434961",
"90878425398801556936846247112417289070",
"274910932909529891423310740211375441249",
"139382330069517695565808578509399333189",
"14882424995741066972297924440817139857",
"51412662180654677543670886909627705036",
"307320668883405934441791221314590642421",
"216091868804539689130924168120669079997",
"225261586633968801331061625614510011693",
"167029639689813891913306310811233797717",
"304386327798494533055011608322834985732",
"180278108720726559138063088213333778282",
"178516641742314961013926590846648088287",
"72226128590339755047275191593328527751",
"300693060533776869277961176175317520417",
"66135873282325780929947038943415369061",
"67588507108370678979462827544825936979",
"318994425878411822255258926513668336997",
"193632025074194273088838835818327296191",
"326469861657849146930829721870777212366",
"49964363143321515083089383636314586614",
"273660621046348952635468156423256198992",
"188273930006070837018287927342026402976",
"12965599479736492987643127921165794769",
"154503228142128356042875631097883307005",
"167901541011587848205138775984125680091",
"156573288043058319656722634587907249611",
"227600496716951591690890332492667267297",
"118306284563951401268176763471323434961",
"90878425398801556936846247112417289070"
],
"threshold": 0.9
},
"id": "CVE-2026-111140-f32bbc05",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7",
"target": {
"file": "libregf/libregf_key_item.c"
}
}
]
vanir_signatures_modified
"2026-10-17T07:06:56Z"