CVE-2026-111147 — Libyal libesedb through 20260704: heap out-of-bounds read via libesedb_record_get_multi_value
Libyal libesedb through 20260704 contains a heap out-of-bounds read vulnerability in libesedb_record_get_multi_value(). An attacker can provide a crafted ESE/EDB database for processing by esedbexport, causing the application to crash or exposing up to about 32 KiB of adjacent heap memory.
CERT24