EUVD-2026-110487

VMime through 0.9.2 contains an information disclosure vulnerability in the uuEncoder::decode function that writes uninitialized stack memory into decoded output for over-long lines. Attackers can send a crafted uuencode or x-uuencode MIME part with a large line length byte to leak up to 15 bytes...

CVE-2026-116739

VMime versions through 0.9.2 are vulnerable to an information disclosure flaw within the uuEncoder::decode function. The root cause is the writing of uninitialized stack memory into decoded output when processing over-long lines. An attacker can exploit this by sending a crafted uuencode or x-uue...

CVE-2026-116739 VMime through 0.9.2 Uninitialized Stack Memory Disclosure via uuencode Decoder

VMime through 0.9.2 contains an information disclosure vulnerability in the uuEncoder::decode function that writes uninitialized stack memory into decoded output for over-long lines. Attackers can send a crafted uuencode or x-uuencode MIME part with a large line length byte to leak up to 15 bytes...