4 matches found
CVE-2026-128991
xschem 2.9.9 through 3.4.7 contains an out-of-bounds read vulnerability in readxschemfile in src/save.c that mishandles embedded-symbol records lacking a preceding instance. Attackers can supply a crafted schematic beginning with a "" record, causing xschem to read and dereference memory below th...
EUVD-2026-125401
xschem 2.9.9 through 3.4.7 contains an out-of-bounds read vulnerability in readxschemfile in src/save.c that mishandles embedded-symbol records lacking a preceding instance. Attackers can supply a crafted schematic beginning with a "" record, causing xschem to read and dereference memory below th...
CVE-2026-128991 xschem 2.9.9 through 3.4.7 Out-of-Bounds Read via read_xschem_file() Embedded-Symbol Record
xschem 2.9.9 through 3.4.7 contains an out-of-bounds read vulnerability in readxschemfile in src/save.c that mishandles embedded-symbol records lacking a preceding instance. Attackers can supply a crafted schematic beginning with a "" record, causing xschem to read and dereference memory below th...
CVE-2026-128991
The software xschem (versions 2.9.9 through 3.4.7 ) contains an out-of-bounds read vulnerability within the read_xschem_file() function in src/save.c. The flaw arises because the software mishandles embedded-symbol records that lack a preceding instance. An attacker can provide a crafted schemati...