A vulnerability in libmspack was found where pointers were not properly initialized when handling errors in KWAJ archive headers. This flaw could allow an attacker to cause a denial of service by crashing libmspack or potentially execute arbitrary code. Fixed versions are available for multiple Ubuntu releases.