CVE-2026-115505

The libsmb2 library prior to version 6.3 is vulnerable to an integer overflow in the DCE/RPC NDR decoder located in lib/dcerpc.c. This flaw allows an attacker, acting as a malicious SMB server or a machine-in-the-middle on unsigned connections, to send crafted NetrShareEnum replies with wrapping ...

EUVD-2026-108337

libsmb2 before 6.3 contains integer overflow vulnerabilities in the DCE/RPC NDR decoder in lib/dcerpc.c that allow heap out-of-bounds reads and writes. A malicious SMB server or machine-in-the-middle on unsigned connections can send crafted NetrShareEnum replies with wrapping actualcount or...