一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月16日

CVE-2026-110716 [MEDIUM] – unshield through 1.6.2 contains a heap out-of-bounds read vulnerability in unshield_get_fi

未分类
📑 文章目录

unshield through 1.6.2 contains a heap out-of-bounds read vulnerability in unshield_get_file_table() that allows attackers to read past heap allocations via unchecked cabinet header offsets. Attackers can supply a crafted InstallShield cabinet with out-of-range file_table_offset or large file counts to crash the unshield tool or library consumers.