CVE-2026-49416

The vt(4) system console driver in FreeBSD contains an integer overflow vulnerability in the CONS_HISTORY ioctl handler. When a large history size is requested, an integer overflow occurs during buffer size calculation, leading to a smaller heap allocation. Subsequent buffer initialization result...