Threats tagged 'ghsa-vvjh-vch2-576w'

libpff versions through 20260926 have an off-by-one bounds check vulnerability in the function libpff_table_read_6c_record_entries. This flaw allows attackers to trigger a heap out-of-bounds read by supplying crafted 6c table record entries in PST, OST, or PAB files. Exploitation can lead to reading adjacent heap memory or application crashes in tools like pffexport or pypff.