CVE-2026-68767

hashcat through 7.1.2 contains an off-by-one out-of-bounds heap write in the fgetl() function (src/filehandling.c). When an input line is exactly HCBUFSIZ_LARGE bytes long, the function writes a null terminator one byte past the caller's buffer. An attacker can trigger this by supplying a crafted...