CESNET Liyang processing logic error vulnerability

CESNET libyang versions 6.4.13 and earlier contain a logic error vulnerability. This vulnerability stems from an uninitialized pointer deallocation issue in the src/parserxml.c file within the lydxmlenvnetconfrpc function when parsing NETCONF RPC action envelopes. Peers with active NETCONF sessio...

ANT-2026-573F8CSS · cesnet/libyang · Memory Corruption / Stack Buffer Overflow

stack-buffer-overflow high GHSA-44h9-v855-6rj3 Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-573F8CSS: Stack buffer overflow...

CESNET libyang Multiple Stack Based Buffer Overflow Vulnerabilities

Description CESNET libyang is prone to multiple stack-based buffer-overflow vulnerabilities because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized memory buffer. An attacker can exploit these issues to execute arbitrary code in the context of a...