libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecfurlvaluesreaddata() that allows attackers to corrupt heap memory via crafted partial URL records. Attackers can supply a crafted MSIE cache index.dat file whose recovered partial record has an oversized unknownoffset, crashing forensic tools processing it.