{"id":"CVE-2026-111140","summary":"libregf through 20260526 Heap Out-of-Bounds Read via libregf_value_item_read_value_data","details":"libregf through 20260526 contains a heap out-of-bounds read in libregf_value_item_read_value_data() because it bounds value data size without subtracting the 4-byte old-format cell offset. Attackers can supply a crafted version 1.0/1.1 REGF hive with a value data cell ending its hive bin to leak adjacent heap bytes or crash parsers like regfexport and plaso.","modified":"2026-10-17T07:06:56.648302767Z","published":"2026-10-15T18:57:32.622Z","database_specific":{"cna_assigner":"VulnCheck","cwe_ids":["CWE-125"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/111xxx/CVE-2026-111140.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/111xxx/CVE-2026-111140.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111140"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/libregf-through-20260526-heap-out-of-bounds-read-via-libregf-value-item-read-value-data"},{"type":"PACKAGE","url":"https://github.com/libyal/libregf"},{"type":"ARTICLE","url":"https://github.com/libyal/libregf/blob/1a4bd856484263caa4a5e0d6ba377c3dc69150c7/libregf/libregf_value_item.c#L789-L935"},{"type":"EVIDENCE","url":"https://hackmd.io/@haind-pwn/libregf-value-data-offset-oob-read"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/libyal/libregf","events":[{"introduced":"0"},{"fixed":"1a4bd856484263caa4a5e0d6ba377c3dc69150c7"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"last_affected":"20260526"},{"fixed":"20260526"}],"source":["AFFECTED_FIELD","DESCRIPTION"]}}],"versions":["20240421"],"database_specific":{"vanir_signatures":[{"signature_version":"v1","source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7","target":{"file":"libregf/libregf_named_key.c","function":"libregf_named_key_compare_name_with_utf16_string"},"deprecated":false,"digest":{"length":2151,"function_hash":"253011472845339062079269467916946409142"},"id":"CVE-2026-111140-00a65286","signature_type":"Function"},{"id":"CVE-2026-111140-02bf387f","signature_type":"Function","signature_version":"v1","source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7","target":{"file":"libregf/libregf_value_key.c","function":"libregf_value_key_get_utf8_name"},"deprecated":false,"digest":{"length":1019,"function_hash":"153239273791821936572511256027561080565"}},{"digest":{"function_hash":"113589135037903999885953470090041863421","length":719},"id":"CVE-2026-111140-0677709b","signature_type":"Function","signature_version":"v1","source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7","target":{"file":"libregf/libregf_key_item.c","function":"libregf_key_item_get_utf16_class_name_size"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7","target":{"function":"libregf_named_key_compare_name_with_utf8_string","file":"libregf/libregf_named_key.c"},"deprecated":false,"digest":{"function_hash":"192853757917294893965094234033385082837","length":2147},"id":"CVE-2026-111140-08e68f5b"},{"target":{"file":"libregf/libregf_named_key.c"},"deprecated":false,"digest":{"line_hashes":["135690324688050730376313153172411432121","649201216851494088031130439427171775","143577260499395461755896105076395071343","201699097061769022238016807452058321889","293451939505045659574617527834331496300","19413555236645558101768001161066770847","278655266792106220172551612241577842941","90878425398801556936846247112417289070","178905603730927915747397643619398748519","208005505337771820787953207541571843050","77464386595295886080417519997402063893","245841377840644563660268649127408798714","80415218901198825741736581541269079253","64041705597775664930410542588657146745","256090227383262937339135362232532903275","232594330281208154631036953995761491699","289378422735500639776553692306946548027","89191439678292473473917694772153507172","4229615331377047772207565971244817584","318485027858146418624528096381481209091","79039805015104389819313080145399412273","201699097061769022238016807452058321889","295085901827034456457177549707933932473","27130874466337760197780811521484636073","259980035782060372729710499435286011867","236693245852473414102881938218139779916","5685143157397139891353817133933459168","180789870706187252003425233269629763600","304519176085246441697666480990241014954","113446932492926453395280073827568772959","269130592944365247833358929941509864993","106536620979043809807648311206109579228","87708616618532872197671908918743243489","318485027858146418624528096381481209091","79039805015104389819313080145399412273","201699097061769022238016807452058321889","135690324688050730376313153172411432121","649201216851494088031130439427171775","143577260499395461755896105076395071343","201699097061769022238016807452058321889","135690324688050730376313153172411432121","649201216851494088031130439427171775","143577260499395461755896105076395071343","201699097061769022238016807452058321889"],"threshold":0.9},"id":"CVE-2026-111140-0d182e11","signature_type":"Line","signature_version":"v1","source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7"},{"target":{"file":"libregf/libregf_multi_string.c"},"deprecated":false,"digest":{"line_hashes":["168569333018920161113067730213869752304","133171213585473786017985449898699876645","332650741293258725754165999069672314158","2499433925567404464680199721089372452","65114286134008628490661323645910313341","263679324112924801892362899131380705173","105733522476428343501623360152514803884","207138023680062550596382170452690709476","269305936006961268897250084280323138537","232521321063841937392763144232718922299","94295439548466460146114693440937520988","166180899360760523455529292830863157488","138109298475185901523618942290262723039","90878425398801556936846247112417289070","60457073025642798846030225263226282961","153727512643849906822705183723482527868","151078901337523793224185736798630929094","106948402368206915207549509747973406122","331323330595493467392825497128963483196","447197363254124176959466041736940303","66135873282325780929947038943415369061","145405901123371043402610572363371803188","72086743845470978977471530624661076684","200581225250796094073917348351703469005","88621541424790278880696673749067546013","166180899360760523455529292830863157488","138109298475185901523618942290262723039","90878425398801556936846247112417289070"],"threshold":0.9},"id":"CVE-2026-111140-18b24b3f","signature_type":"Line","signature_version":"v1","source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7"},{"target":{"file":"pyregf/pyregf_multi_string.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["107413750203203894662935217455595897966","205959111437896074732321097115094777437","337085936200401412868136965379341847071","312142113735961046536773327162136700884","170961600146843268425932857031631483260","331807681902943486897273158059662114098","312041930586964517929996449218451357399","326719049346544442497369267787753933424","217701031206281224874264371100280095647","76159456076021229656977947317982665280","43349830832203215711735875125005833113","170961600146843268425932857031631483260","331807681902943486897273158059662114098","312041930586964517929996449218451357399","326719049346544442497369267787753933424","217701031206281224874264371100280095647","76159456076021229656977947317982665280","6375822506950439666466518444649317672"]},"id":"CVE-2026-111140-1d0c3b8a","signature_type":"Line","signature_version":"v1","source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7"},{"digest":{"function_hash":"154662122501084936888278923163331967775","length":1502},"id":"CVE-2026-111140-278841bd","signature_type":"Function","signature_version":"v1","source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7","target":{"file":"libregf/libregf_multi_string.c","function":"libregf_multi_string_get_utf16_string_size"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7","target":{"file":"libregf/libregf_value_item.c","function":"libregf_value_item_read_value_data"},"deprecated":false,"digest":{"function_hash":"188223833129113461172793493646508609975","length":5972},"id":"CVE-2026-111140-2a10408c","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7","target":{"file":"libregf/libregf_value_item.c","function":"libregf_value_item_get_value_utf8_string"},"deprecated":false,"digest":{"function_hash":"256325547485354847731466626154998235003","length":1412},"id":"CVE-2026-111140-300ade46"},{"digest":{"function_hash":"196453620775459733414470100764583329612","length":809},"id":"CVE-2026-111140-3551c36d","signature_type":"Function","signature_version":"v1","source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7","target":{"function":"libregf_named_key_get_utf16_name_size","file":"libregf/libregf_named_key.c"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7","target":{"file":"libregf/libregf_named_key.c","function":"libregf_named_key_get_utf8_name_size"},"deprecated":false,"digest":{"function_hash":"102132084059801344793828024350636521940","length":807},"id":"CVE-2026-111140-358e9d2b","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7","target":{"file":"libregf/libregf_value_key.c","function":"libregf_value_key_get_utf16_name"},"deprecated":false,"digest":{"length":1021,"function_hash":"303694061516851163161186136216648191486"},"id":"CVE-2026-111140-35e0f0e2"},{"target":{"function":"libregf_value_key_get_utf16_name_size","file":"libregf/libregf_value_key.c"},"deprecated":false,"digest":{"length":1044,"function_hash":"62819766404656198257545324891448902337"},"id":"CVE-2026-111140-5b9bc122","signature_type":"Function","signature_version":"v1","source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7"},{"source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7","target":{"file":"libregf/libregf_key_item.c","function":"libregf_key_item_read_class_name_data"},"deprecated":false,"digest":{"function_hash":"60720212442330983613741839489396495082","length":2588},"id":"CVE-2026-111140-5fe31a8e","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7","target":{"file":"libregf/libregf_value_key.c","function":"libregf_value_key_get_utf8_name_size"},"deprecated":false,"digest":{"function_hash":"335819534518449693689958585907311583612","length":1041},"id":"CVE-2026-111140-6894bb73","signature_type":"Function"},{"id":"CVE-2026-111140-6e22eca1","signature_type":"Function","signature_version":"v1","source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7","target":{"function":"libregf_multi_string_get_utf8_string","file":"libregf/libregf_multi_string.c"},"deprecated":false,"digest":{"function_hash":"132418608077490711329608930946145234098","length":1509}},{"target":{"file":"libregf/libregf_value_item.c","function":"libregf_value_item_get_value_utf16_string_size"},"deprecated":false,"digest":{"function_hash":"156382857466364009910227402168414948329","length":1629},"id":"CVE-2026-111140-74926f9c","signature_type":"Function","signature_version":"v1","source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7"},{"digest":{"function_hash":"318953427935964414361568490285234335352","length":829},"id":"CVE-2026-111140-76dbc367","signature_type":"Function","signature_version":"v1","source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7","target":{"file":"libregf/libregf_named_key.c","function":"libregf_named_key_get_utf16_name"},"deprecated":false},{"target":{"function":"libregf_multi_string_get_utf8_string_size","file":"libregf/libregf_multi_string.c"},"deprecated":false,"digest":{"length":1500,"function_hash":"127366636319574380193898059786005525412"},"id":"CVE-2026-111140-804ff59f","signature_type":"Function","signature_version":"v1","source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7"},{"deprecated":false,"digest":{"function_hash":"208256365409623813276662181338451421101","length":1511},"id":"CVE-2026-111140-819dbbed","signature_type":"Function","signature_version":"v1","source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7","target":{"file":"libregf/libregf_multi_string.c","function":"libregf_multi_string_get_utf16_string"}},{"target":{"file":"libregf/libregf_value_key.c","function":"libregf_value_key_read_data"},"deprecated":false,"digest":{"function_hash":"289381841251417239925337734383354500470","length":8957},"id":"CVE-2026-111140-8221c942","signature_type":"Function","signature_version":"v1","source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7","target":{"file":"libregf/libregf_value_key.c","function":"libregf_value_key_compare_name_with_utf8_string"},"deprecated":false,"digest":{"function_hash":"207970078891292683559987530924074965518","length":1833},"id":"CVE-2026-111140-8370a2ff"},{"signature_version":"v1","source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7","target":{"file":"libregf/libregf_value_key.c","function":"libregf_value_key_compare_name_with_utf16_string"},"deprecated":false,"digest":{"length":1836,"function_hash":"272974733647103337404577172114828473031"},"id":"CVE-2026-111140-83ede26b","signature_type":"Function"},{"signature_version":"v1","source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7","target":{"file":"libregf/libregf_key_item.c","function":"libregf_key_item_get_utf8_class_name_size"},"deprecated":false,"digest":{"function_hash":"163939320153970683995844344406364458189","length":717},"id":"CVE-2026-111140-97fdf848","signature_type":"Function"},{"target":{"file":"pyregf/pyregf_value.c"},"deprecated":false,"digest":{"line_hashes":["107413750203203894662935217455595897966","157980909078885175092934523452969989139","160411416101229482721289557403409481972","177549741758843516929128279909553703320","170961600146843268425932857031631483260","331807681902943486897273158059662114098","312041930586964517929996449218451357399","326719049346544442497369267787753933424","217701031206281224874264371100280095647","76159456076021229656977947317982665280","43349830832203215711735875125005833113","170961600146843268425932857031631483260","331807681902943486897273158059662114098","23155496258735880601505111386282758670","320825070512771086612738084195149588653","62504958946025296257993594042841543762","326801717529232868727373591114720624046","287332343747071113149944627854262322094"],"threshold":0.9},"id":"CVE-2026-111140-989007f2","signature_type":"Line","signature_version":"v1","source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7"},{"target":{"file":"pyregf/pyregf_multi_string.c","function":"pyregf_multi_string_iternext"},"deprecated":false,"digest":{"length":1455,"function_hash":"75449721705500795601572706230177042129"},"id":"CVE-2026-111140-99b54fe3","signature_type":"Function","signature_version":"v1","source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7"},{"target":{"function":"pyregf_multi_string_getitem","file":"pyregf/pyregf_multi_string.c"},"deprecated":false,"digest":{"length":1325,"function_hash":"322317299606109035532677984730059499151"},"id":"CVE-2026-111140-9a71f195","signature_type":"Function","signature_version":"v1","source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7"},{"digest":{"line_hashes":["3893788356863642267734360990720638994","122309087261024845028341267216640281393","254860602736366038120889939555103805550","309916747822642416944604940452062669915","141362824341786874065161946817070261569","168990949981414171656591911442134036534","209196861678524745782858569978717972656","123042337166718861125378078872647454945","70622254889704592504008251346706914554","55192203568652503674044929168672209345","197373956005419432095372036484673558712","311196441873813800047896661452324894152","318410109266950222106787126100695872811","144057661215797973243651697914217028312","307889526589990740895817342025341409690","159636905407957713072139918779364344985","120266713843560266465144168496387217039","49715644667086925475207952708970445986","213780351143478582283481262377581171902","81354176956886080458234321628361925348","95852245216816020778565507385362712813","314454283372634285311814522413115070064","105733522476428343501623360152514803884","111468089106755088707749742652989610596","117098252825123059292000474321915597979","188789184517902478112256349588959264894","301709256131780516909107031800361968632","269644790965740937245568160051978652740","91322051493285896367194703739529768144","90878425398801556936846247112417289070","285580101756270542625174686361103291236","186586394368380815618724247912433718874","155168472615272188791851658826456268046","193039392654979734604934386390207842429","240899703880302805608101232739761866553","84257099642553669904840367611763486267","66135873282325780929947038943415369061","287708954736296587557498710242015005572","102448160228208149582785851287605400682","93554393150239060433663567975448238576","121590833969522144025689546057195418688","269644790965740937245568160051978652740","91322051493285896367194703739529768144","90878425398801556936846247112417289070"],"threshold":0.9},"id":"CVE-2026-111140-a26b7f65","signature_type":"Line","signature_version":"v1","source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7","target":{"file":"libregf/libregf_value_item.c"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"111517898982481326253169519093842104805","length":9462},"id":"CVE-2026-111140-a62e84d8","signature_type":"Function","signature_version":"v1","source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7","target":{"function":"libregf_named_key_read_data","file":"libregf/libregf_named_key.c"}},{"target":{"file":"libregf/libregf_value_item.c","function":"libregf_value_item_get_value_utf8_string_size"},"deprecated":false,"digest":{"function_hash":"264184066199108930473902342130557897036","length":1626},"id":"CVE-2026-111140-b8ae4650","signature_type":"Function","signature_version":"v1","source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7"},{"digest":{"threshold":0.9,"line_hashes":["264805990787890648013610281825226986792","29194413588528932329537599132891935773","58785914338037258954170656509615359215","203624953959803596679577451220782757633","170961600146843268425932857031631483260","331807681902943486897273158059662114098","312041930586964517929996449218451357399","326719049346544442497369267787753933424","217701031206281224874264371100280095647","76159456076021229656977947317982665280","43349830832203215711735875125005833113","170961600146843268425932857031631483260","331807681902943486897273158059662114098","312041930586964517929996449218451357399","326719049346544442497369267787753933424","217701031206281224874264371100280095647","76159456076021229656977947317982665280","43349830832203215711735875125005833113"]},"id":"CVE-2026-111140-ba3a9915","signature_type":"Line","signature_version":"v1","source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7","target":{"file":"pyregf/pyregf_key.c"},"deprecated":false},{"source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7","target":{"file":"libregf/libregf_value_key.c"},"deprecated":false,"digest":{"line_hashes":["78211204130503252268839929555250540586","110271622276683355115474098458523691677","143577260499395461755896105076395071343","201699097061769022238016807452058321889","338719149849256035998736718378951937757","121206599714204116464913537802487433123","52076666467514752065859140424951264797","90878425398801556936846247112417289070","57701284142035536076842977099590892908","219233598516645157049703055138048691113","85807261818204789928738993666559927570","105279373753586058395901430633991565075","20196788440560128063740405427415255947","122568572416850368024346727258068447580","128108362494583168738239914543450097001","49006613542277505889678517191638988434","301459937874734669307402503972523682459","105808230464195638460550627993951720205","195727907971344628972122013751338134607","238772754641469512043311642554836552610","182220363517119287925169554978156352413","201699097061769022238016807452058321889","219102526303829563325163124704923824117","248179973215314863391161738881413469275","155602067546822221057703734237263660342","250891244859271219404099059098534966976","314149207103537938686555285962325710612","62079201826567070419802378330664947676","20563882634371968211130040407509883754","161438118593810684553504643649886170441","194252375218364639705223524302506158341","149781100996232314483190115336537072094","27878790166177458567639444840533782079","238772754641469512043311642554836552610","182220363517119287925169554978156352413","201699097061769022238016807452058321889","78211204130503252268839929555250540586","110271622276683355115474098458523691677","143577260499395461755896105076395071343","201699097061769022238016807452058321889","78211204130503252268839929555250540586","110271622276683355115474098458523691677","143577260499395461755896105076395071343","201699097061769022238016807452058321889"],"threshold":0.9},"id":"CVE-2026-111140-be6a1a34","signature_type":"Line","signature_version":"v1"},{"source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7","target":{"file":"libregf/libregf_key_item.c","function":"libregf_key_item_get_utf8_class_name"},"deprecated":false,"digest":{"length":727,"function_hash":"231751461166309750316023798503528192011"},"id":"CVE-2026-111140-d07609cd","signature_type":"Function","signature_version":"v1"},{"source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7","target":{"file":"libregf/libregf_value_item.c","function":"libregf_value_item_get_value_utf16_string"},"deprecated":false,"digest":{"length":1414,"function_hash":"117401408571022740159928131180187695282"},"id":"CVE-2026-111140-d2df1c6e","signature_type":"Function","signature_version":"v1"},{"source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7","target":{"file":"libregf/libregf_named_key.c","function":"libregf_named_key_get_utf8_name"},"deprecated":false,"digest":{"function_hash":"259323701910640099538561365765066932938","length":827},"id":"CVE-2026-111140-d7d3ddde","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"87891505192747057885686842857651321554","length":729},"id":"CVE-2026-111140-d829ee99","signature_type":"Function","signature_version":"v1","source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7","target":{"function":"libregf_key_item_get_utf16_class_name","file":"libregf/libregf_key_item.c"}},{"source":"https://github.com/libyal/libregf/commit/1a4bd856484263caa4a5e0d6ba377c3dc69150c7","target":{"file":"libregf/libregf_key_item.c"},"deprecated":false,"digest":{"line_hashes":["128562985219218757523311314845996266945","227600496716951591690890332492667267297","118306284563951401268176763471323434961","90878425398801556936846247112417289070","107915091406628319904786263099682879424","143110271609084389609417321268323747449","311924108687562531540074394728082681764","290348695823360143403993782209205274159","108599897053546397547507891409959752031","56567542235414793006212931313874963105","15587615778390165298188314268416314434","108935768922310364312480924152392016233","65243393786202255587881799473469458728","42485384714017532081898448422749163633","97504972293926025753766874577247346347","301917940049678747699333154540372184792","258807627877349568295860175818315615995","105733522476428343501623360152514803884","141019002916057742592555551458995671954","142953425126230811038911667108584571171","138478684084408446186056094802540693275","22344431503558553652894961701223106600","16118759476324904666013372399336843023","320023715272521202365207299345506979703","924853717317333567884622361405435956","298779101631583967791566431006811641941","277216576103185617031354006774805261021","154580088077298458904266406004007129132","29888312882439628758848102014471971871","227600496716951591690890332492667267297","118306284563951401268176763471323434961","90878425398801556936846247112417289070","274910932909529891423310740211375441249","139382330069517695565808578509399333189","14882424995741066972297924440817139857","51412662180654677543670886909627705036","307320668883405934441791221314590642421","216091868804539689130924168120669079997","225261586633968801331061625614510011693","167029639689813891913306310811233797717","304386327798494533055011608322834985732","180278108720726559138063088213333778282","178516641742314961013926590846648088287","72226128590339755047275191593328527751","300693060533776869277961176175317520417","66135873282325780929947038943415369061","67588507108370678979462827544825936979","318994425878411822255258926513668336997","193632025074194273088838835818327296191","326469861657849146930829721870777212366","49964363143321515083089383636314586614","273660621046348952635468156423256198992","188273930006070837018287927342026402976","12965599479736492987643127921165794769","154503228142128356042875631097883307005","167901541011587848205138775984125680091","156573288043058319656722634587907249611","227600496716951591690890332492667267297","118306284563951401268176763471323434961","90878425398801556936846247112417289070"],"threshold":0.9},"id":"CVE-2026-111140-f32bbc05","signature_type":"Line","signature_version":"v1"}],"vanir_signatures_modified":"2026-10-17T07:06:56Z","source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-111140.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N"}]}