Libmsiecf
Monthly
libmsiecf, the libyal library for parsing Microsoft Internet Explorer cache index.dat files, contains a double free in libmsiecf_url_values_read_data() that corrupts heap memory when a recovered partial URL record carries an oversized unknown_offset, allowing a crafted index.dat file to crash the forensic tool parsing it. All versions through 20260525 are affected, and the impact is availability-only: there is no privilege escalation or data disclosure, the vector is local, and an operator must actually ingest the malicious file (CVSS 4.0 6.8; independently assessed as CVSS 3.1 AV:L/AC:L/PR:N/UI:R with A:H). Exposure is concentrated in DFIR/forensic pipelines that process untrusted evidentiary cache files; EPSS is 0.13% (2nd percentile), no public exploit code has been confirmed at time of analysis, and a public technical write-up (HackMD) describes the flaw. This is a genuine but low-urgency issue, not a high-severity emergency.
libmsiecf, the libyal library for parsing Microsoft Internet Explorer cache index.dat files, contains a double free in libmsiecf_url_values_read_data() that corrupts heap memory when a recovered partial URL record carries an oversized unknown_offset, allowing a crafted index.dat file to crash the forensic tool parsing it. All versions through 20260525 are affected, and the impact is availability-only: there is no privilege escalation or data disclosure, the vector is local, and an operator must actually ingest the malicious file (CVSS 4.0 6.8; independently assessed as CVSS 3.1 AV:L/AC:L/PR:N/UI:R with A:H). Exposure is concentrated in DFIR/forensic pipelines that process untrusted evidentiary cache files; EPSS is 0.13% (2nd percentile), no public exploit code has been confirmed at time of analysis, and a public technical write-up (HackMD) describes the flaw. This is a genuine but low-urgency issue, not a high-severity emergency.