UBUNTU-CVE-2026-116735: Medium severity ubuntu/libpff vulnerability

Published Oct 26, 2026

Updated

libpff through 20260926 contains an off-by-one bounds check in libpfftableread6crecordentries that allows attackers to trigger a heap out-of-bounds read via crafted 6c table record entries. Attackers can supply crafted PST, OST or PAB files to applications like pffexport or pypff to read adjacent heap memory or cause crashes.

Affected Software

7 affected components

ubuntu/libpff*

Event History

Oct 26, 2026

CVE Published

via OSV·10:16 PM

Data Sourced

via OSV·10:16 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which environments are most exposed?

Systems using libpff through 20260926 to process PST, OST, or PAB files are affected. Applications named in the available information include pffexport and pypff.

What does an attacker need to trigger the issue?

An attacker needs to provide crafted 6c table record entries in a PST, OST, or PAB file and have a vulnerable application process that file. The supplied CVSS vector indicates local attack access and user interaction are required.

How can I identify potentially affected installations?

Identify installations of libpff at versions through 20260926, particularly where pffexport, pypff, or other software processes untrusted PST, OST, or PAB files. The provided information does not identify a fixed version.

UBUNTU-CVE-2026-116735: Medium severity ubuntu/libpff vulnerability

Affected Software

Event History

Frequently Asked Questions

Which environments are most exposed?

What does an attacker need to trigger the issue?

How can I identify potentially affected installations?

Company

Resources

Contact

Frequently Asked Questions

Which environments are most exposed?

What does an attacker need to trigger the issue?

How can I identify potentially affected installations?