CVE-2026-0006
Severity
9.8CRITICAL
EPSS
0.0%
top 85.69%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 2
Description
In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9
Affected Packages3 packages
🔴Vulnerability Details
3GHSA▶
GHSA-54hc-pp69-f6fp: In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow↗2026-03-02
CVEList▶
CVE-2026-0006: In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow↗2026-03-02
OSV▶
CVE-2026-0006: In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow↗2026-03-01