- CVE-2026-20213: fix integer overflow in Aspack-triggered PE rebuild size calculation leading to a heap buffer overflow - CVE-2026-20214: fix FSG unpacker section loop underflow causing an out-of-bounds write - CVE-2026-20215: fix 7z substream count overflow causing under-allocation and heap buffer overflow - CVE-2026-20216: enforce InstallShield extraction limits against cumulative decompressed output - CVE-2026-20217: fix PESpin unpacker cleanup bitmap tracking causing invalid free - CVE-2026-20243: fix ALZ archive parser out-of-bounds buffer write and scan-limit bypass leading to denial of service via crafted ALZ file