Lucene search
+L

3 matches found

Cvelist
Cvelist
•added 2026/10/13 1:27 p.m.•39 views

CVE-2026-74045 Wazuh 3.12.0 before 4.14.8 Heap Buffer Overflow in wazuh-analysisd FIM Decoder

Wazuh from 3.12.0 before 4.14.8 contains a heap buffer overflow in fimgeneratealert where fulllog is sized from input but written bounded by OSMAXSTR. An enrolled agent can send a crafted FIM syscheck event to corrupt manager heap memory and deterministically crash wazuh-analysisd, causing a...

7.1CVSS0.00341EPSS
SaveExploits0References3
Rows per page
Query Builder