CVE-2026-126048

Gwenhywfar versions 4.99.8beta before 5.14.2 are vulnerable to a stack-based buffer overflow within the GWEN_TLV_Buffer_To_DB() function in src/parser/tlv.c. The flaw occurs during the decoding of BER-TLV tags into a fixed 128-byte buffer. An attacker can trigger a crash by providing a record con...