THREATOPS
THREAT OPSThreat News › libmspack: heap buffer overflow in make_decode_table() (Huffman decode table construction) -- CVE requested

libmspack: heap buffer overflow in make_decode_table() (Huffman decode table construction) -- CVE requested

lowoss_secPublished 2026-08-16

<p>Posted by Sumit Chakraborty on Aug 16</p>Hi all,<br /> <br /> Reporting a memory-safety issue found via independent source audit of<br /> libmspack (<a href="https://github.com/kyz/libmspack" rel="nofollow">https://github.com/kyz/libmspack</a>), a small C library for<br /> Microsoft compression formats (CAB, CHM, LIT, HLP, KWAJ, SZDD) used by<br /> cabextract and vendored by ClamAV (libclammspa

MITRE ATT&CK techniques

Original source: https://seclists.org/oss-sec/2026/q3/504