Threats tagged 'ghsa-gcj6-823j-cwm9'

Libpff through 20260926 has a heap out-of-bounds read vulnerability in the function libpff_table_read_values_array. This occurs because the values_array_size of a 7c column definition is not validated against the remaining buffer bytes. An attacker can exploit this by supplying a crafted PST, OST, or PAB file, potentially causing applications to read adjacent heap memory or crash.