CVE-2026-122130

The CESNET ipfixcol2 software (versions 2.3.0 before 2.9.0 ) is vulnerable to a heap buffer overflow within the Forwarder output plugin . The root cause is an integer overflow occurring when wrapping uint16_t message length counters. This allows unauthenticated IPFIX exporters to send near-65535-...

EUVD-2026-117084

CESNET ipfixcol2 2.3.0 before 2.9.0 contains an integer overflow vulnerability in the Forwarder output plugin that allows unauthenticated IPFIX exporters to overflow a heap buffer by wrapping uint16t message length counters. Attackers can send near-65535-byte data sets and large templates to a...

CVE-2026-122129

The CESNET ipfixcol2 software (versions 2.7.1 before 2.9.0) is vulnerable to a memory allocation flaw in the Lz4Decoder::read_start_header() function. An unauthenticated attacker can exploit this by opening TCP connections and sending LZ4 start headers with very large buffer sizes. This allows th...

EUVD-2026-117083

CESNET ipfixcol2 2.7.1 before 2.9.0 contains a memory allocation vulnerability in Lz4Decoder::readstartheader that allows unauthenticated attackers to exhaust memory by declaring unbounded ring buffer sizes. Attackers can open TCP connections sending LZ4 start headers with very large buffer sizes...

CVE-2026-122127

The CESNET ipfixcol2 software, versions 2.7.1 before 2.9.0 , is vulnerable to a heap-based buffer overflow within the Lz4Decoder.cpp component. The root cause allows unauthenticated network peers to provide a small ring buffer_size followed by a large decompressed_size, enabling them to write up ...

EUVD-2026-117082

CESNET ipfixcol2 2.7.1 before 2.9.0 contains a heap-based buffer overflow in Lz4Decoder.cpp that allows unauthenticated network peers to write past heap buffers. Attackers can declare a small ring buffersize followed by a large decompressedsize to write up to 65535 controlled bytes and crash the...