CVE-2026-32849

🗓️ 18 May 2026 17:42:29Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 35 Views🌐 WEB

CVE-2026-32849: NetBSD overflow in cryptodev_op triggers kernel panic when dst_len exceeds INT_MAX.

Reporter	Title	Published	Views	Family All 8
attackerkb	CVE-2026-32849	18 May 202617:42	–	attackerkb
CNNVD	NetBSD 输入验证错误漏洞	18 May 202600:00	–	cnnvd
Cvelist	CVE-2026-32849 NetBSD Signed Integer Overflow in cryptodev_op via cryptodev.c	18 May 202617:42	–	cvelist
EUVD	EUVD-2026-30789	18 May 202617:42	–	euvd
NVD	CVE-2026-32849	18 May 202618:17	–	nvd
Positive Technologies	PT-2026-41714	18 May 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2026-32849: Integer Overflow or Wraparound	18 May 202600:00	–	rapid7
Vulnrichment	CVE-2026-32849 NetBSD Signed Integer Overflow in cryptodev_op via cryptodev.c	18 May 202617:42	–	vulnrichment

Vulners

Node

netbsd srcRange0–ec8451efc1565516aba9e7047e1a1a1ce7953a2f

[
  {
    "defaultStatus": "affected",
    "packageURL": "pkg:github/NetBSD/src",
    "vendor": "NetBSD",
    "product": "src",
    "repo": "https://github.com/NetBSD/src",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "git",
        "lessThan": "ec8451efc1565516aba9e7047e1a1a1ce7953a2f"
      }
    ]
  }
]

Source	Link
github	www.github.com/NetBSD/src/commit/ec8451efc1565516aba9e7047e1a1a1ce7953a2f
nasm	www.nasm.re/posts/uaf_netbsd_crypto/
vulncheck	www.vulncheck.com/advisories/netbsd-signed-integer-overflow-in-cryptodev-op-via-cryptodev-c

Parameter	Position	Path	Description	CWE
dst_len	path	/dev/crypto	Signed integer overflow in cryptodev_op due to iov_len being assigned from cop->dst_len, allowing an attacker to supply dst_len > INT_MAX to trigger NULL pointer dereference and kernel panic when CONFIG_SVS is disabled.	CWE-190, CWE-476

14 Jul 2026 19:16Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.15.5

CVSS 45.7

EPSS0.00152

SSVC