CVE-2026-108985

sahlberg / libnfs PUBLISHED

Description (CNA)

ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-bounds write related to lib/libnfs-zdr.c with libnfs_zdr_bytes(), libnfs_zdr_string(), and libnfs_zdr_array(). The caller-supplied maxsize value is not honored.

Affected (CNA)

Vendor / product	Versions
sahlberg / libnfs	affected 0 before 7613236464317bee2d9636f087f995148de4db27; affected 0 through 6.0.2

CWE

CWE-787

References

https://github.com/sahlberg/libnfs/commit/7613236464317bee2d9636f087f995148de4db27

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.