6 matches found
EUVD-2026-110487
VMime through 0.9.2 contains an information disclosure vulnerability in the uuEncoder::decode function that writes uninitialized stack memory into decoded output for over-long lines. Attackers can send a crafted uuencode or x-uuencode MIME part with a large line length byte to leak up to 15 bytes...
EUVD-2026-110486
VMime through 0.9.2 contains an integer underflow in the uuEncoder::decode function that allows remote attackers to trigger a stack-based buffer overflow via crafted uuencoded MIME parts. Attackers can send an email with a uuencoded line whose length character is 'b' but is not a 'begin' line,...
CVE-2026-116739
VMime versions through 0.9.2 are vulnerable to an information disclosure flaw within the uuEncoder::decode function. The root cause is the writing of uninitialized stack memory into decoded output when processing over-long lines. An attacker can exploit this by sending a crafted uuencode or x-uue...
CVE-2026-116739 VMime through 0.9.2 Uninitialized Stack Memory Disclosure via uuencode Decoder
VMime through 0.9.2 contains an information disclosure vulnerability in the uuEncoder::decode function that writes uninitialized stack memory into decoded output for over-long lines. Attackers can send a crafted uuencode or x-uuencode MIME part with a large line length byte to leak up to 15 bytes...
CVE-2026-116738
VMime versions up to and including 0.9.2 are vulnerable to a stack-based buffer overflow due to an integer underflow in the uuEncoder::decode function. A remote attacker can exploit this by sending an email containing crafted uuencoded MIME parts; specifically, a uuencoded line with a length char...
CVE-2026-116738 VMime through 0.9.2 Stack-Based Buffer Overflow via uuencode Decoder
VMime through 0.9.2 contains an integer underflow in the uuEncoder::decode function that allows remote attackers to trigger a stack-based buffer overflow via crafted uuencoded MIME parts. Attackers can send an email with a uuencoded line whose length character is 'b' but is not a 'begin' line,...