THREAT OPS › Threat News › libmspack: heap buffer overflow in make_decode_table() (Huffman decode table construction) -- CVE requested
libmspack: heap buffer overflow in make_decode_table() (Huffman decode table construction) -- CVE requested
<p>Posted by Sumit Chakraborty on Aug 16</p>Hi all,<br /> <br /> Reporting a memory-safety issue found via independent source audit of<br /> libmspack (<a href="https://github.com/kyz/libmspack" rel="nofollow">https://github.com/kyz/libmspack</a>), a small C library for<br /> Microsoft compression formats (CAB, CHM, LIT, HLP, KWAJ, SZDD) used by<br /> cabextract and vendored by ClamAV (libclammspa
MITRE ATT&CK techniques
- CompressionT1027.015
Original source: https://seclists.org/oss-sec/2026/q3/504