CVE-2025-57632

libsmb2 6.2+ is vulnerable to Buffer Overflow. When processing SMB2 chained PDUs NextCommand, libsmb2 repeatedly calls smb2addiovector to append to a fixed-size iovec array without checking the upper bound of v-niov SMB2MAXVECTORS=256. An attacker can craft responses with many chained PDUs to...

CVE-2025-57632

libsmb2 versions 6.2 and later are vulnerable to a Buffer Overflow (CWE-120) when processing SMB2 chained PDUs via the NextCommand function. The vulnerability arises because the smb2_add_iovector() function is repeatedly called to append to a fixed-size iovec array without checking the upper boun...