CVE-2026-111137

A flaw was found in libsmi. An out-of-bounds write vulnerability in the smiValueAsString function allows an attacker to cause a Denial of Service DoS. By supplying a specially crafted Management Information Base MIB file containing an oversized string value, an attacker can overflow an internal...

CVE-2026-111137 libsmi through 0.5.0 Out-of-Bounds Write via smiValueAsString OCTET STRING DEFVAL

libsmi through 0.5.0 contains an out-of-bounds write vulnerability in smiValueAsString in lib/smi.c that allows attackers to overflow a fixed 1024-byte static buffer through hex rendering of OCTET STRING values. Attackers can supply a crafted MIB with an OCTET STRING DEFVAL of 512 or more octets...

CVE-2026-111137

The libsmi library, versions through 0.5.0 , is vulnerable to an out-of-bounds write in the smiValueAsString() function located in lib/smi.c . The root cause is a buffer overflow of a fixed 1024-byte static buffer during the hex rendering of OCTET STRING values. An attacker can trigger this by su...