Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.5
cleanstart libmspack may run harmful code from crafted files
published 4 days ago
Summary
The libmspack component used by cleanstart can be tricked by specially crafted archive files to execute unwanted code. This could let an attacker run programs on your system without permission. Update libmspack to the latest version or apply the vendor’s recommended patch.
What to do
- Update cleanstart libmspack to version 0.7.1_alpha-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | libmspack |
< 0.7.1_alpha-r0 Fix: upgrade to 0.7.1_alpha-r0
|
Original advisory text
issue was discovered in mspack/chmd
Security vulnerability affects the libmspack package. An issue was discovered in mspack/chmd.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2023-XW11505 · OSV
Track software like this
Free during beta