CVE-2017-9058

Critical

Published: 18/05/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

In libytnef in versions up to 1.9.2, there is a heap-based buffer over-read due to incorrect boundary checking in the SIZECHECK macro in lib/ytnef.c.

This vulnerability may lead to unauthorized memory access, potentially resulting in data leakage or application crashes.

It is recommended to update libytnef to the latest version to mitigate this vulnerability.

Original NVD description (English source)

In libytnef in ytnef through 1.9.2, there is a heap-based buffer over-read due to incorrect boundary checking in the SIZECHECK macro in lib/ytnef.c.