Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
cleanstart libmspack could let attackers run code
published 4 days ago
Summary
The libmspack library used in cleanstart can be tricked into executing malicious code when it processes specially crafted compressed files. This could allow an attacker to take control of the affected system or steal data. Update to the latest version of libmspack or apply the vendor’s patch as soon as possible.
What to do
- Update cleanstart libmspack to version 0.5_alpha-r1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | libmspack |
< 0.5_alpha-r1 Fix: upgrade to 0.5_alpha-r1
|
Original advisory text
mspack/lzxd
Security vulnerability affects the libmspack package. mspack/lzxd.
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2023-EC41853 · OSV
Track software like this
Free during beta