CVE-2026-70368

CVE-2026-70368 involves a stack-based out-of-bounds read in stunnel’s s_vlog when processing oversized log messages via vsnprintf. A remote attacker can send protocol inputs to a stunnel service that produce a log entry longer than 1024 bytes, triggering the out-of-bounds read and potentially cau...