{"id":"EUVD-2026-28813","enisaUuid":"7d93d83d-07c9-3e43-9c1e-1200f41fd9e4","description":"OpenMcdf is a fully .NET / C# library to manipulate Compound File Binary File Format files, also known as Structured Storage. Prior to version 3.1.3, OpenMcdf does not detect cycles in the directory entry red-black tree of a Compound File Binary (CFB) document. A crafted CFB file with a cycle in the LeftSiblingID / RightSiblingID chain causes Storage.EnumerateEntries() and Storage.OpenStream() to loop indefinitely, consuming the calling thread with no possibility of recovery via try/catch. This issue has been patched in version 3.1.3.","datePublished":"May 8, 2026, 6:52:39 PM","dateUpdated":"May 11, 2026, 6:45:06 PM","baseScore":6.2,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://github.com/openmcdf/openmcdf/security/advisories/GHSA-jxpf-xq2m-q525\nhttps://github.com/openmcdf/openmcdf/commit/24f445a557fc4f46461cf6d02d296cce16c293a0\nhttps://github.com/openmcdf/openmcdf/releases/tag/v3.1.3\n","aliases":"CVE-2026-41511\nGHSA-jxpf-xq2m-q525\n","assigner":"GitHub_M","epss":0.19,"enisaIdProduct":[{"id":"0c6cee85-0ec6-385b-a53f-0eac6daacbef","product":{"name":"openmcdf","vendor":{"name":"ironfede"}},"product_version":"\u003c 3.1.3"}],"enisaIdVendor":[{"id":"189e97d2-58ec-3141-95fd-33be03e511c4","vendor":{"name":"ironfede"}}],"enisaIdVulnerability":[{"id":"5170b8a5-e140-3d4f-9214-4ee63066deb8","vulnerability":{"id":"CVE-2026-41511","description":"OpenMcdf is a fully .NET / C# library to manipulate Compound File Binary File Format files, also known as Structured Storage. Prior to version 3.1.3, OpenMcdf does not detect cycles in the directory entry red-black tree of a Compound File Binary (CFB) document. A crafted CFB file with a cycle in the LeftSiblingID / RightSiblingID chain causes Storage.EnumerateEntries() and Storage.OpenStream() to loop indefinitely, consuming the calling thread with no possibility of recovery via try/catch. This issue has been patched in version 3.1.3.","datePublished":"May 8, 2026, 6:52:39 PM","dateUpdated":"May 11, 2026, 6:45:06 PM","status":"PUBLISHED","baseScore":6.2,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://github.com/openmcdf/openmcdf/security/advisories/GHSA-jxpf-xq2m-q525\nhttps://github.com/openmcdf/openmcdf/commit/24f445a557fc4f46461cf6d02d296cce16c293a0\nhttps://github.com/openmcdf/openmcdf/releases/tag/v3.1.3\n","enisa_id":"EUVD-2026-28813\n","assigner":"GitHub_M","epss":0.19,"dataProcessed":"Oct 27, 2026, 7:17:29 AM","vulnerabilityProduct":[{"id":"ec33207d-98ad-3352-9e0d-9595329a22c0","product":{"name":"openmcdf","vendor":{"name":"ironfede"}},"product_version":"\u003c 3.1.3"}],"vulnerabilityVendor":[{"id":"9b8465c0-cc26-34e6-a7d2-0e06e90262fe","vendor":{"name":"ironfede"}}]}},{"id":"5c561bdd-2251-372e-9fc7-8584ae24d9c6","vulnerability":{"id":"GHSA-jxpf-xq2m-q525","description":"OpenMcdf has an Infinite loop DoS via crafted CFB directory cycle","datePublished":"Apr 22, 2026, 10:09:01 PM","dateUpdated":"May 13, 2026, 1:33:51 PM","baseScore":0.0,"references":"https://github.com/openmcdf/openmcdf/security/advisories/GHSA-jxpf-xq2m-q525\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-41511\nhttps://github.com/openmcdf/openmcdf/commit/24f445a557fc4f46461cf6d02d296cce16c293a0\nhttps://github.com/openmcdf/openmcdf\nhttps://github.com/openmcdf/openmcdf/releases/tag/v3.1.3\n","enisa_id":"EUVD-2026-28813\n","aliases":"CVE-2026-41511\nGHSA-jxpf-xq2m-q525\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:55:10 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}