Description (CNA)
Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of uninitialized stack memory values to a client.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Exim / Exim | affected 4.88 before 4.99.4 |
CWE
CWE-839
References
- https://exim.org/static/doc/security/EXIM-Security-2026-05-19.1
- https://www.openwall.com/lists/oss-security/2026/05/29/3
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.