CVE-2026-88839

The BusyBox passwd/group utility contains a vulnerability in the tokenize() function where it references a stale endpoint pointer after trimming. This flaw leads to an out-of-bounds write of heap pointers. To mitigate this risk, ensure that /etc/group and /etc/passwd are writable only by root and...

PT-2026-105033

BusyBox passwd/group tokenize references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers...