Every CVE Search/ Get API key

CVE-2026-110602

libmspack through 0.11alpha Uninitialized Pointer Free via kwajd_open Error Path

5.8 MediumFix available

libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajd_open() in mspack/kwajd.c that frees unzeroed filename and extra pointers on header read errors. Attackers can supply a truncated, empty, or wrong-signature KWAJ file to crash the process or obtain an arbitrary-free memory corruption primitive.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Passive

What an attacker can affect

Confidentiality
None
Integrity
High
Availability
High

Exploit likelihood

0.24%Unchanged since Oct 15, 2026
90%50%10%1%

What each source reports

CVE List Score used 5.8

libmspack through 0.11alpha Uninitialized Pointer Free via kwajd_open Error Path

libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajd_open() in mspack/kwajd.c that frees unzeroed filename and extra pointers on header read errors. Attackers can supply a truncated, empty, or wrong-signature KWAJ file to crash the process or obtain an arbitrary-free memory corruption primitive.

Record
CVE-2026-110602
CVSS 4.0
5.8 MediumCVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
6.3 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H
Weakness
CWE-824
Updated
2026-11-02
EUVDEUVD-2026-101230 5.8

libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajd_open() in mspack/kwajd.c that frees unzeroed filename and extra pointers on header read errors. Attackers can supply a truncated, empty, or wrong-signature KWAJ file to crash the process or obtain an arbitrary-free memory corruption primitive.

Record
EUVD-2026-101230
CVSS 4.0
5.8 MediumCVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-5m37-fqj8-q94j 5.8

libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajd_open()...

libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajd_open() in mspack/kwajd.c that frees unzeroed filename and extra pointers on header read errors. Attackers can supply a truncated, empty, or wrong-signature KWAJ file to crash the process or obtain an arbitrary-free memory corruption primitive.

Record
GHSA-5m37-fqj8-q94j
CVSS 4.0
5.8 MediumCVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
6.3 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H
Weakness
CWE-824
Updated
2026-11-02
NVD 5.8

libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajd_open() in mspack/kwajd.c that frees unzeroed filename and extra pointers on header read errors. Attackers can supply a truncated, empty, or wrong-signature KWAJ file to crash the process or obtain an arbitrary-free memory corruption primitive.

Record
CVE-2026-110602
CVSS 4.0
5.8 MediumCVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
6.3 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H
Weakness
CWE-824
Updated
2026-11-02
OSVBELL-CVE-2026-110602 6.3
Record
BELL-CVE-2026-110602
CVSS 3.1
6.3 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSV 5.8

libmspack through 0.11alpha Uninitialized Pointer Free via kwajd_open Error Path

libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajd_open() in mspack/kwajd.c that frees unzeroed filename and extra pointers on header read errors. Attackers can supply a truncated, empty, or wrong-signature KWAJ file to crash the process or obtain an arbitrary-free memory corruption primitive.

Record
CVE-2026-110602
CVSS 4.0
5.8 MediumCVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
Weakness
CWE-824
Updated
2026-11-02
Show 5 moreShow less
OSVDEBIAN-CVE-2026-110602 5.8

libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajd_open() in mspack/kwajd.c that frees unzeroed filename and extra pointers on header read errors. Attackers can supply a truncated, empty, or wrong-signature KWAJ file to crash the process or obtain an arbitrary-free memory corruption primitive.

Record
DEBIAN-CVE-2026-110602
CVSS 4.0
5.8 MediumCVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
OSVUBUNTU-CVE-2026-110602 5.8

libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajd_open() in mspack/kwajd.c that frees unzeroed filename and extra pointers on header read errors. Attackers can supply a truncated, empty, or wrong-signature KWAJ file to crash the process or obtain an arbitrary-free memory corruption primitive.

Record
UBUNTU-CVE-2026-110602
CVSS 4.0
5.8 MediumCVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
6.3 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H
Updated
2026-11-03
OSVAZL-108330 No score

CVE-2026-110602 affecting package clamav 1.5.4-2

libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajd_open() in mspack/kwajd.c that frees unzeroed filename and extra pointers on header read errors. Attackers can supply a truncated, empty, or wrong-signature KWAJ file to crash the process or obtain an arbitrary-free memory corruption primitive.

Record
AZL-108330
Updated
2026-11-05
OSVAZL-108393 No score

CVE-2026-110602 affecting package libmspack 0.11alpha-1

libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajd_open() in mspack/kwajd.c that frees unzeroed filename and extra pointers on header read errors. Attackers can supply a truncated, empty, or wrong-signature KWAJ file to crash the process or obtain an arbitrary-free memory corruption primitive.

Record
AZL-108393
Updated
2026-11-05
OSVUSN-8973-1 No score

libmspack vulnerability

It was discovered that libmspack did not properly initialize pointers when handling errors while reading KWAJ archive headers. An attacker could possibly use this issue to cause libmspack to crash, resulting in a denial of service, or execute arbitrary code.

Record
USN-8973-1
Updated
2026-11-04

Affected products

Affected packages

Affected packages
PackageAffectedFixed
clamav
Azure Linux:3
 through 1.5.4-2 None known
libmspack
Azure Linux:3
 through 0.11alpha-1 None known
libmspack
Alpaquita:23
 0.10.1_alpha-r0 and later None known
libmspack
Alpaquita:25
 0.11_alpha-r1 and later None known
libmspack
Alpaquita:stream
 0.11_alpha-r1 and later None known
libmspack
Debian:12
 All versions, plus listed versions
0.11-10.11-1.10.11-1.1~exp10.11-2
 None known
libmspack
Debian:13
 All versions, plus listed versions
0.11-1.10.11-2
 None known
libmspack
Debian:14
 before 0.11-2, plus listed versions
0.11-1.1
0.11-2
clamav
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
0.97.8+dfsg-1ubuntu40.97.8+dfsg-1ubuntu50.98.1+dfsg-1ubuntu40.98.1+dfsg-1ubuntu50.98.1+dfsg-2ubuntu2
Show 28 moreShow less
0.98.1+dfsg-4ubuntu10.98.1+dfsg-4ubuntu1.10.98.5+addedllvm-0ubuntu0.14.04.10.98.6+dfsg-0ubuntu0.14.04.10.98.7+dfsg-0ubuntu0.14.04.10.99.2+addedllvm-0ubuntu0.14.04.10.99.2+addedllvm-0ubuntu0.14.04.20.99.3+addedllvm-0ubuntu0.14.04.10.99.4+addedllvm-0ubuntu0.14.04.10.100.1+dfsg-1ubuntu0.14.04.10.100.1+dfsg-1ubuntu0.14.04.20.100.1+dfsg-1ubuntu0.14.04.30.100.1+dfsg-1ubuntu0.14.04.40.100.2+dfsg-1ubuntu0.14.04.10.100.2+dfsg-1ubuntu0.14.04.20.100.3+dfsg-0ubuntu0.14.04.10.100.3+dfsg-0ubuntu0.14.04.1+esm10.101.4+dfsg-0ubuntu0.14.04.1+esm10.102.1+dfsg-0ubuntu0.14.04.1+esm10.102.2+dfsg-0ubuntu0.14.04.1+esm10.102.3+dfsg-0ubuntu0.14.04.1+esm10.102.4+dfsg-0ubuntu0.14.04.1+esm10.103.2+dfsg-0ubuntu0.14.04.1+esm10.103.2+dfsg-0ubuntu0.14.04.1+esm20.103.5+dfsg-0ubuntu0.14.04.1+esm10.103.6+dfsg-0ubuntu0.14.04.1+esm10.103.8+dfsg-0ubuntu0.14.04.1+esm10.103.9+dfsg-0ubuntu0.14.04.1+esm1
 None known
libmspack
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
0.4-10.4-1ubuntu0.1~esm10.4-1ubuntu0.1~esm2
 None known
Show 7 moreShow less
Affected packages
PackageAffectedFixed
libmspack
Ubuntu:16.04:LTS
 All versions, plus listed versions
0.5-10.5-1ubuntu0.16.04.10.5-1ubuntu0.16.04.20.5-1ubuntu0.16.04.30.5-1ubuntu0.16.04.4
 None known
libmspack
Ubuntu:18.04:LTS
 All versions, plus listed versions
0.6-30.6-3ubuntu0.10.6-3ubuntu0.20.6-3ubuntu0.3
 None known
libmspack
Ubuntu:20.04:LTS
 All versions, plus listed versions
0.10.1-10.10.1-2
 None known
libmspack
Ubuntu:22.04:LTS
 before 0.10.1-2ubuntu0.1, plus listed versions
0.10.1-2build10.10.1-2build2
0.10.1-2ubuntu0.1
libmspack
Ubuntu:24.04:LTS
 before 0.11-1.1ubuntu0.24.04.1, plus listed versions
0.11-10.11-1.10.11-1.1build1
0.11-1.1ubuntu0.24.04.1
libmspack
Ubuntu:26.10
 before 0.11-1.1ubuntu0.26.10.1, plus listed versions
0.11-1.1build2
0.11-1.1ubuntu0.26.10.1
libmspack
Ubuntu:26.04:LTS
 before 0.11-1.1ubuntu0.26.04.1, plus listed versions
0.11-1.1build10.11-1.1build2
0.11-1.1ubuntu0.26.04.1

History

History
RecordedChangedSources
affected, aliasesOSV
affected, facts, referencesOSV
affected, aliases, references
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-110602 is a medium vulnerability (CVSS 5.8) in Kyz Libmspack, published October 14, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 14th percentile. Fixed in libmspack 0.11-2.

References

Show 8 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open