CVE-2026-57081: Uncontrolled Recursion

Net::BitTorrent versions through 2.0.1 for Perl allow remote memory exhaustion via deeply nested bencoded input. bdecode recurses once per nested list or dictionary level with no depth cap, and each recursive call receives the remaining buffer by value while the list and dictionary branches captu...

libtorrent 'bdecode' function heap buffer overflow vulnerability

libtorrent is an open source C++ Bittorrent library developed by software developer Arvid Norberg, which provides high performance and good code style of the BT development kit, and supports crawling file pages directly through the network stack. A security vulnerability exists in the 'bdecode'...

Heap overflow

The bdecode function in bdecode.cpp in libtorrent 1.1.3 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

CVE-2017-9847

The bdecode function in bdecode.cpp in libtorrent 1.1.3 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

DEBIAN-CVE-2017-9847

The bdecode function in bdecode.cpp in libtorrent 1.1.3 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

UBUNTU-CVE-2017-9847

The bdecode function in bdecode.cpp in libtorrent 1.1.3 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

CVE-2017-9847

CVE-2017-9847 details (from provided documents): The vulnerability affects libtorrent 1.1.3, specifically the bdecode function in bdecode.cpp. A crafted file can cause a heap-based buffer over-read, leading to a denial of service and application crash. The CVE implies a remote attacker could trig...

CVE-2017-9847

The bdecode function in bdecode.cpp in libtorrent 1.1.3 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

CVE-2017-9847

The bdecode function in bdecode.cpp in libtorrent 1.1.3 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

PT-2017-19215

Name of the Vulnerable Software and Affected Versions libtorrent version 1.1.3 Description The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, via a crafted file. This is due to a problem in the bdecode function in...

DEBIAN-CVE-2015-5685

The lazybdecode function in BitTorrent DHT bootstrap server bootstrap-dht allows remote attackers to execute arbitrary code via a crafted packet, related to "improper indexing."...

PT-2015-7033

Name of the Vulnerable Software and Affected Versions BitTorrent DHT bootstrap server bootstrap-dht affected versions not specified Description The issue allows remote attackers to execute arbitrary code via a crafted packet, related to improper indexing in the lazy bdecode function. This is a...

PT-2014-8572

Name of the Vulnerable Software and Affected Versions BitTorrent Bootstrap affected versions not specified Description The issue allows remote attackers to execute arbitrary code via a crafted packet. This is related to "Improper Indexing" and triggers an out-of-bounds read in the lazy bdecode...