Live › vulnerability › CVE-2026-116736
Go to dashboardlibpff, a library for reading Outlook PST, OST and PAB mail files, does not check a column size against the remaining buffer in libpff_table_read_values_array. A crafted mail file can make an application read adjacent heap memory into record values or crash.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 22:25 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Libpff through 20260926 contains a heap out-of-bounds read vulnerability in libpff_table_read_values_array because a 7c column definition's values_array_size is not checked against remaining buffer bytes. Attackers can supply a crafted PST, OST or PAB file to make applications read adjacent heap memory into record entry values or crash.
This page as .md · .json · in your agent: get_signal("CVE-2026-116736")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.