libpff through 20260926 Heap Out-of-Bounds Read via libpff_table_read_6c_record_entries

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-116735 · Microsoft / collected KEV context

cve-program · CVE-2026-116735

• https://github.com/libyal/libpff/issues/172
• https://github.com/libyal/libpff
• https://github.com/libyal/libpff/commit/cb83eb38ffdbdfe2c69238fe7ce481ddc8513266
• https://github.com/libyal/libpff/blob/20260926/libpff/libpff_table.c#L5431-L5445
• https://hackmd.io/@haindpwn/libpff-table-parsing-oob-reads
• https://www.vulncheck.com/advisories/libpff-through-20260926-heap-out-of-bounds-read-via-libpff-table-read-6c-record-entries

• libpff through 20260926 Heap Out-of-Bounds Read via libpff_table_read_6c_record_entries · Newly collected advisory · 26 Oct 2026