libmspack could be made to expose sensitive information if it received a specially crafted CHM file.