CVE-2026-111134
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
39/100
Published: 2026-10-15
Modified: 2026-10-27
First seen: 2026-10-29
Status: active
Attack Surface
Low Complexity
No Auth
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
None
UI:
Passive
AT:
None
VC:
Low
VI:
None
VA:
High
Description
libfwsi through 20260522 contains a heap out-of-bounds read vulnerability in libfwsi_mtp_file_entry_values_read_data() that allows attackers to read past buffer bounds via crafted MTP file entry shell items. Attackers can embed a 10 to 73 byte shell item with item data size of 44 or more in .lnk files, jump lists or shell bags to crash libfwsi consumers.