CVE-2026-111147: libesedb 0 through 20260704

Affected technology

libesedb · 0 through 20260704
libyal

Description’s affected range: through 20260704

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Local · No privileges required · Passive user interaction

What an attacker can do

Attackers can supply a crafted ESE/EDB database processed by esedbexport to crash the application or expose up to about 32 KiB of adjacent heap memory. Vendor/CNA’s CVSS 4.0 assessment (base score 6.9/10) rates confidentiality impact as low; integrity impact as none; availability impact as high.