CVE-2025-57632

The CVE-2025-57632 entry concerns libsmb2 6.2+ vulnerable to a Buffer Overflow when processing SMB2 chained PDUs (NextCommand). The root cause is repeated calls to smb2_add_iovector() that append to a fixed-size iovec array without checking the upper bound of v->niov (SMB2_MAX_VECTORS=256). Th...

CVE-2025-57632

libsmb2 6.2+ is vulnerable to Buffer Overflow. When processing SMB2 chained PDUs NextCommand, libsmb2 repeatedly calls smb2addiovector to append to a fixed-size iovec array without checking the upper bound of v-niov SMB2MAXVECTORS=256. An attacker can craft responses with many chained PDUs to...