Approved changes feed: RSS · Atom

cpe:2.3:a:kisli:vmime:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorKisli (5567c875-5c24-5220-922b-ee1300c46dc1)
ProductVmime (16faaa31-2685-59ae-a316-3c216d3e6640)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-116739 vulnerable 2026-11-03 10:15:21.609200 VMime through 0.9.2 Uninitialized Stack Memory Disclosure via uuencode Decoder
MEDIUM (4.3)
VMime through 0.9.2 contains an information disclosure vulnerability in the uuEncoder::decode function that writes uninitialized stack memory into decoded output for over-long lines. Attackers can send a crafted uuencode or x-uuencode MIME part with a large line length byte to leak up to 15 bytes of stack contents per line in decoded attachments.
Published: 2026-10-26T21:52:38.496Z
Updated: 2026-11-04T15:18:57.296Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-116738 vulnerable 2026-11-03 10:15:21.295473 VMime through 0.9.2 Stack-Based Buffer Overflow via uuencode Decoder
HIGH (8.8)
VMime through 0.9.2 contains an integer underflow in the uuEncoder::decode function that allows remote attackers to trigger a stack-based buffer overflow via crafted uuencoded MIME parts. Attackers can send an email with a uuencoded line whose length character is 'b' but is not a 'begin' line, corrupting stack memory to crash the application or potentially execute code.
Published: 2026-10-26T21:52:37.804Z
Updated: 2026-10-27T14:16:56.633Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.