CVE-2014-9556: Libmspack Project Libmspack

Medium severity, CVSS 5.0. EPSS: 2.8% chance of exploitation in the next 30 days.

Integer overflow in the qtmd_decompress function in libmspack 0.4 allows remote attackers to cause a denial of service (hang) via a crafted CAB file, which triggers an infinite loop.

Affected products

• Libmspack Project Libmspack: version 0.4 only

Published 2015-02-03. Last modified 2026-06-17.