Wazuh fim_generate_alert() DoS

The vulnerability of the fimgeneratealert function on the security monitoring and threat detection platform Wazuh involves an escape from the buffer boundary into memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

CVE-2026-74045 Wazuh 3.12.0 before 4.14.8 Heap Buffer Overflow in wazuh-analysisd FIM Decoder

Wazuh from 3.12.0 before 4.14.8 contains a heap buffer overflow in fimgeneratealert where fulllog is sized from input but written bounded by OSMAXSTR. An enrolled agent can send a crafted FIM syscheck event to corrupt manager heap memory and deterministically crash wazuh-analysisd, causing a...

CVE-2026-74045

Wazuh from 3.12.0 before 4.14.8 contains a heap buffer overflow in fimgeneratealert where fulllog is sized from input but written bounded by OSMAXSTR. An enrolled agent can send a crafted FIM syscheck event to corrupt manager heap memory and deterministically crash wazuh-analysisd, causing a...

CVE-2026-74045 Wazuh 3.12.0 before 4.14.8 Heap Buffer Overflow in wazuh-analysisd FIM Decoder

Wazuh from 3.12.0 before 4.14.8 contains a heap buffer overflow in fimgeneratealert where fulllog is sized from input but written bounded by OSMAXSTR. An enrolled agent can send a crafted FIM syscheck event to corrupt manager heap memory and deterministically crash wazuh-analysisd, causing a...

CVE-2026-74045 Wazuh 3.12.0 before 4.14.8 Heap Buffer Overflow in wazuh-analysisd FIM Decoder

Wazuh from 3.12.0 before 4.14.8 contains a heap buffer overflow in fimgeneratealert where fulllog is sized from input but written bounded by OSMAXSTR. An enrolled agent can send a crafted FIM syscheck event to corrupt manager heap memory and deterministically crash wazuh-analysisd, causing a...