Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-116739

VMime through 0.9.2 Uninitialized Stack Memory Disclosure via uuencode Decoder

VMime through 0.9.2 contains an information disclosure vulnerability in the uuEncoder::decode function that writes uninitialized stack memory into decoded output for over-long lines. Attackers can send a crafted uuencode or x-uuencode MIME part with a large line length byte to leak up to 15 bytes of stack contents per line in decoded attachments.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Kisli
Products
Vmime
CVE-2026-116738

VMime through 0.9.2 Stack-Based Buffer Overflow via uuencode Decoder

VMime through 0.9.2 contains an integer underflow in the uuEncoder::decode function that allows remote attackers to trigger a stack-based buffer overflow via crafted uuencoded MIME parts. Attackers can send an email with a uuencoded line whose length character is 'b' but is not a 'begin' line, corrupting stack memory to crash the application or potentially execute code.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Kisli
Products
Vmime