# Libyal vulnerabilities Source: https://junglewise.ai/threats/vendors/libyal Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/libyal.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 11 vulnerabilities in Libyal: 0 in the last 7 days and 11 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-116743, was published on 26 October 2026. 11 vulnerabilities in the last four weeks, up from none in the four before. 1 technology has a page of its own. ## Counts - Last 7 days: 0 - Last 30 days: 11 - Last 90 days: 11 - All time: 11 (0 critical, 0 exploited in the wild) ## About Libyal Developer of open-source libraries for file format parsing and forensic analysis. ## Latest Libyal vulnerabilities - [CVE-2026-116743: libyal libmsiecf double free in URL values parser](https://junglewise.ai/threats/cve-2026-116743-libyal-libmsiecf-through-20260525-contains-a-double-free) (medium, CVSS 5.5, published 26 Oct 2026) - [CVE-2026-116737: libphdi heap out-of-bounds read in directory prefix handling](https://junglewise.ai/threats/cve-2026-116737-libphdi-through-20260902-contains-a-heap-out-of-bounds-read) (medium, CVSS 6.1, published 26 Oct 2026) - [CVE-2026-116736: Libpff heap out-of-bounds read in table parsing](https://junglewise.ai/threats/cve-2026-116736-libpff-through-20260926-contains-a-heap-out-of-bounds-read) (medium, CVSS 6.1, published 26 Oct 2026) - [CVE-2026-116735: libpff off-by-one heap buffer read in table record parsing](https://junglewise.ai/threats/cve-2026-116735-libpff-through-20260926-contains-an-off-by-one-bounds-check-in) (medium, CVSS 6.1, published 26 Oct 2026) - [CVE-2026-111159: libewf heap out-of-bounds read in extended attribute parsing](https://junglewise.ai/threats/cve-2026-111159-libewf-through-20260924-contains-a-heap-out-of-bounds-read) (medium, CVSS 6.1, published 15 Oct 2026) - [CVE-2026-111147: Libyal libesedb heap out-of-bounds read in record parsing](https://junglewise.ai/threats/cve-2026-111147-libyal-libesedb-through-20260704-contains-a-heap-out-of-bounds) (medium, CVSS 6.1, published 15 Oct 2026) - [CVE-2026-111140: libregf heap out-of-bounds read in value data parsing](https://junglewise.ai/threats/cve-2026-111140-libregf-through-20260526-contains-a-heap-out-of-bounds-read-in) (medium, CVSS 6.1, published 15 Oct 2026) - [CVE-2026-111135: libfwsi heap out-of-bounds read in MTP volume parsing](https://junglewise.ai/threats/cve-2026-111135-libfwsi-through-20260522-contains-a-heap-out-of-bounds-read) (medium, CVSS 6.1, published 15 Oct 2026) - [CVE-2026-111134: libfwsi heap out-of-bounds read in MTP file entry parsing](https://junglewise.ai/threats/cve-2026-111134-libfwsi-through-20260522-contains-a-heap-out-of-bounds-read) (medium, CVSS 6.1, published 15 Oct 2026) - [CVE-2026-111133: libfsapfs integer underflow in libfsapfs_key_encrypted_key_read_data](https://junglewise.ai/threats/cve-2026-111133-libfsapfs-through-20260921-contains-an-integer-underflow-in) (medium, CVSS 6.1, published 15 Oct 2026) - [CVE-2026-110598: libyal libpff integer underflow in record entry parsing](https://junglewise.ai/threats/cve-2026-110598-libyal-libpff-through-20260926-contains-an-integer-underflow-in) (medium, CVSS 6.1, published 14 Oct 2026) ## Most severe Libyal vulnerabilities - [CVE-2026-111133: libfsapfs integer underflow in libfsapfs_key_encrypted_key_read_data](https://junglewise.ai/threats/cve-2026-111133-libfsapfs-through-20260921-contains-an-integer-underflow-in) (medium, CVSS 6.1, published 15 Oct 2026) - [CVE-2026-110598: libyal libpff integer underflow in record entry parsing](https://junglewise.ai/threats/cve-2026-110598-libyal-libpff-through-20260926-contains-an-integer-underflow-in) (medium, CVSS 6.1, published 14 Oct 2026) - [CVE-2026-111159: libewf heap out-of-bounds read in extended attribute parsing](https://junglewise.ai/threats/cve-2026-111159-libewf-through-20260924-contains-a-heap-out-of-bounds-read) (medium, CVSS 6.1, published 15 Oct 2026) - [CVE-2026-111147: Libyal libesedb heap out-of-bounds read in record parsing](https://junglewise.ai/threats/cve-2026-111147-libyal-libesedb-through-20260704-contains-a-heap-out-of-bounds) (medium, CVSS 6.1, published 15 Oct 2026) - [CVE-2026-111140: libregf heap out-of-bounds read in value data parsing](https://junglewise.ai/threats/cve-2026-111140-libregf-through-20260526-contains-a-heap-out-of-bounds-read-in) (medium, CVSS 6.1, published 15 Oct 2026) - [CVE-2026-111135: libfwsi heap out-of-bounds read in MTP volume parsing](https://junglewise.ai/threats/cve-2026-111135-libfwsi-through-20260522-contains-a-heap-out-of-bounds-read) (medium, CVSS 6.1, published 15 Oct 2026) - [CVE-2026-111134: libfwsi heap out-of-bounds read in MTP file entry parsing](https://junglewise.ai/threats/cve-2026-111134-libfwsi-through-20260522-contains-a-heap-out-of-bounds-read) (medium, CVSS 6.1, published 15 Oct 2026) - [CVE-2026-116737: libphdi heap out-of-bounds read in directory prefix handling](https://junglewise.ai/threats/cve-2026-116737-libphdi-through-20260902-contains-a-heap-out-of-bounds-read) (medium, CVSS 6.1, published 26 Oct 2026) - [CVE-2026-116736: Libpff heap out-of-bounds read in table parsing](https://junglewise.ai/threats/cve-2026-116736-libpff-through-20260926-contains-a-heap-out-of-bounds-read) (medium, CVSS 6.1, published 26 Oct 2026) - [CVE-2026-116735: libpff off-by-one heap buffer read in table record parsing](https://junglewise.ai/threats/cve-2026-116735-libpff-through-20260926-contains-an-off-by-one-bounds-check-in) (medium, CVSS 6.1, published 26 Oct 2026) ## Vulnerabilities per week 11 vulnerabilities in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 7 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 4 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Libyal technologies - [Libyal Libpff](https://junglewise.ai/threats/technologies/libpff): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Libyal vulnerabilities", https://junglewise.ai/threats/vendors/libyal, 9 November 2026.