CVE-2026-2016 — happyfish100 libfastcommon base64.c base64_decode stack-based overflow

Description (CNA)

A security vulnerability has been detected in happyfish100 libfastcommon up to 1.0.84. Affected by this vulnerability is the function base64_decode of the file src/base64.c. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used. The identifier of the patch is 82f66af3e252e3e137dba0c3891570f085e79adf. Applying a patch is the recommended action to fix this issue.

Affected (CNA)

Vendor / product	Versions
happyfish100 / libfastcommon	affected 1.0.0; affected 1.0.1; affected 1.0.2; affected 1.0.3; affected 1.0.4; affected 1.0.5; affected 1.0.6; affected 1.0.7; affected 1.0.8; affected 1.0.9; affected 1.0.10; affected 1.0.11; affected 1.0.12; affected 1.0.13; affected 1.0.14; affected 1.0.15; affected 1.0.16; affected 1.0.17; affected 1.0.18; affected 1.0.19; affected 1.0.20; affected 1.0.21; affected 1.0.22; affected 1.0.23; affected 1.0.24; affected 1.0.25; affected 1.0.26; affected 1.0.27; affected 1.0.28; affected 1.0.29; affected 1.0.30; affected 1.0.31; affected 1.0.32; affected 1.0.33; affected 1.0.34; affected 1.0.35; affected 1.0.36; affected 1.0.37; affected 1.0.38; affected 1.0.39; affected 1.0.40; affected 1.0.41; affected 1.0.42; affected 1.0.43; affected 1.0.44; affected 1.0.45; affected 1.0.46; affected 1.0.47; affected 1.0.48; affected 1.0.49; affected 1.0.50; affected 1.0.51; affected 1.0.52; affected 1.0.53; affected 1.0.54; affected 1.0.55; affected 1.0.56; affected 1.0.57; affected 1.0.58; affected 1.0.59; affected 1.0.60; affected 1.0.61; affected 1.0.62; affected 1.0.63; affected 1.0.64; affected 1.0.65; affected 1.0.66; affected 1.0.67; affected 1.0.68; affected 1.0.69; affected 1.0.70; affected 1.0.71; affected 1.0.72; affected 1.0.73; affected 1.0.74; affected 1.0.75; affected 1.0.76; affected 1.0.77; affected 1.0.78; affected 1.0.79; affected 1.0.80; affected 1.0.81; affected 1.0.82; affected 1.0.83; affected 1.0.84

Vendor / product

Versions

happyfish100 / libfastcommon

affected 1.0.0; affected 1.0.1; affected 1.0.2; affected 1.0.3; affected 1.0.4; affected 1.0.5; affected 1.0.6; affected 1.0.7; affected 1.0.8; affected 1.0.9; affected 1.0.10; affected 1.0.11; affected 1.0.12; affected 1.0.13; affected 1.0.14; affected 1.0.15; affected 1.0.16; affected 1.0.17; affected 1.0.18; affected 1.0.19; affected 1.0.20; affected 1.0.21; affected 1.0.22; affected 1.0.23; affected 1.0.24; affected 1.0.25; affected 1.0.26; affected 1.0.27; affected 1.0.28; affected 1.0.29; affected 1.0.30; affected 1.0.31; affected 1.0.32; affected 1.0.33; affected 1.0.34; affected 1.0.35; affected 1.0.36; affected 1.0.37; affected 1.0.38; affected 1.0.39; affected 1.0.40; affected 1.0.41; affected 1.0.42; affected 1.0.43; affected 1.0.44; affected 1.0.45; affected 1.0.46; affected 1.0.47; affected 1.0.48; affected 1.0.49; affected 1.0.50; affected 1.0.51; affected 1.0.52; affected 1.0.53; affected 1.0.54; affected 1.0.55; affected 1.0.56; affected 1.0.57; affected 1.0.58; affected 1.0.59; affected 1.0.60; affected 1.0.61; affected 1.0.62; affected 1.0.63; affected 1.0.64; affected 1.0.65; affected 1.0.66; affected 1.0.67; affected 1.0.68; affected 1.0.69; affected 1.0.70; affected 1.0.71; affected 1.0.72; affected 1.0.73; affected 1.0.74; affected 1.0.75; affected 1.0.76; affected 1.0.77; affected 1.0.78; affected 1.0.79; affected 1.0.80; affected 1.0.81; affected 1.0.82; affected 1.0.83; affected 1.0.84

CWE

CWE-121, CWE-119

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.