CVE-2026-110716: unshield through 1.6.2 Heap Out-of-Bounds Read via unshield_get_file_table
unshield through 1.6.2 contains a heap out-of-bounds read vulnerability in unshieldgetfiletable() that allows attackers to read past heap allocations via unchecked cabinet header offsets. Attackers can supply a crafted InstallShield cabinet with out-of-range filetableoffset or large file counts to crash the unshield tool or library consumers.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Users and applications that run unshield or consume its library to process InstallShield cabinet files are exposed when they handle attacker-supplied or otherwise untrusted cabinets.
What does an attacker need to exploit it?
An attacker needs to provide a crafted InstallShield cabinet containing an out-of-range file_table_offset or large file counts. The supplied CVSS vector indicates local attack access and user interaction are required, with no privileges required.
What is the likely impact?
The malformed cabinet can cause unshield or a library consumer to read beyond a heap allocation and crash. The provided severity vector indicates availability impact, with no stated confidentiality or integrity impact.