UBUNTU-CVE-2026-119602: Medium severity ubuntu/clamav vulnerability
libmspack through 0.11alpha contains an uninitialized memory disclosure vulnerability in the MS-ZIP decompressor that allows attackers to leak heap data via unchecked back-reference distances. Attackers can supply a crafted MS-ZIP CAB file whose first block begins with a back-reference, causing cabd->extract() to write up to 32 KiB of stale heap memory into extracted output.
Affected Software
Event History
Frequently Asked Questions
What must an attacker provide to trigger the disclosure?
The attacker must supply a crafted MS-ZIP CAB file whose first block starts with a back-reference using an unchecked distance.
What data could be exposed if exploitation succeeds?
Extraction can write up to 32 KiB of stale heap memory into the extracted output. The reported impact is confidentiality loss only; no integrity or availability impact is listed.
Which Ubuntu software entries are associated with this issue?
The affected software entries provided are ubuntu/clamav and ubuntu/libmspack.