busybox: Busybox: Denial of Service via heap overflow in evalcommand() function

A flaw was found in Busybox. A heap overflow vulnerability in the evalcommand function allows attackers to cause a Denial of Service DoS by supplying a specially crafted input. This can lead to the unavailability of the service...

EUVD-2026-44851

A heap overflow in the evalcommand function shell/ash.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

CVE-2026-38755

A heap overflow in the evalcommand function shell/ash.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

CVE-2026-38755

A heap overflow in the evalcommand function shell/ash.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

CVE-2026-38755

A heap overflow in the evalcommand function shell/ash.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

CVE-2026-38755

A heap overflow in the evalcommand function shell/ash.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

PT-2026-60314

Name of the Vulnerable Software and Affected Versions Busybox version 1.38.0 Description A heap overflow occurs in the evalcommand function shell/ash.c, which can be triggered by providing crafted input, leading to a Denial of Service DoS. A heap overflow is a memory corruption issue where a...

CVE-2026-38755

A heap overflow exists in the evalcommand() function (located in shell/ash.c ) of Busybox v1.38.0 . This vulnerability allows an attacker to trigger a Denial of Service (DoS) by providing crafted input . While some sources indicate a lack of a vendor-supplied patch, other records suggest that a p...