← CVE Intelligence

CVE-2026-16095

Shibby Tomato rc setup_conntrack out-of-bounds write PUBLISHED

Description (CNA)

A flaw has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. Affected by this issue is the function setup_conntrack of the file /sbin/rc. Executing a manipulation of the argument ct_tcp_timeout can lead to out-of-bounds write. The attack may be performed from remote. This project is superseded by FreshTomato.

Affected (CNA)

Vendor / productVersions
Shibby / Tomatoaffected 1.28 RT-N5x MIPSR2 Build 124

CWE

CWE-787, CWE-119

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.