CVE-2026-81665: Heap-based Buffer Overflow

A heap-based buffer overflow was found in Corosync's Totem Process Group totempg message reassembly. When processing fragmented multicast messages, the buffer used to reassemble fragments lacks a runtime bounds check in release builds. A network-adjacent attacker able to send crafted multicast...

Corosync buffer error vulnerability

Corosync has a buffer overflow vulnerability. This vulnerability stems from the lack of runtime boundary checking during the message reassembly of Corosync’s Totem Process Group. Network-connected attackers can exploit this vulnerability by sending specially crafted multicast protocol messages,...