- CVE-2026-20213: fix Aspack-triggered PE rebuild integer overflow leading to heap buffer overflow write - CVE-2026-20214: fix FSG unpacker section loop underflow leading to out-of-bounds write - CVE-2026-20215: fix 7z substream count overflow leading to heap under-allocation and out-of-bounds write - CVE-2026-20216: enforce InstallShield extraction limits to prevent temporary storage exhaustion - CVE-2026-20217: fix PESpin unpacker cleanup bitmap tracking leading to invalid free and crash