CVE-2026-103680 Tnef: heap buffer overflow in find_free_number() via numbered-backup suffix generation

A flaw was found in tnef. A heap-based buffer overflow can occur in the findfreenumber function when generating numbered backup suffixes for duplicate filenames. When numbered backups are enabled and file overwriting is disabled, an attacker can supply a specially crafted Transport Neutral...

CVE-2026-103680 Tnef: heap buffer overflow in find_free_number() via numbered-backup suffix generation

A flaw was found in tnef. A heap-based buffer overflow can occur in the findfreenumber function when generating numbered backup suffixes for duplicate filenames. When numbered backups are enabled and file overwriting is disabled, an attacker can supply a specially crafted Transport Neutral...

CVE-2026-103680

A heap-based buffer overflow vulnerability exists in the tnef component within the find_free_number() function. The flaw is triggered during the generation of numbered backup suffixes for duplicate filenames. If numbered backups are enabled and file overwriting is disabled, an attacker can provid...

CVE-2026-103680 Tnef: heap buffer overflow in find_free_number() via numbered-backup suffix generation

A flaw was found in tnef. A heap-based buffer overflow can occur in the findfreenumber function when generating numbered backup suffixes for duplicate filenames. When numbered backups are enabled and file overwriting is disabled, an attacker can supply a specially crafted Transport Neutral...