Libsmi
Monthly
Out-of-bounds write in libsmi through 0.5.0 allows attackers to corrupt adjacent library globals via a crafted MIB file that supplies an OCTET STRING DEFVAL of 512 or more octets beginning with a 0x00 byte, causing smiValueAsString() to overflow a fixed 1024-byte static buffer during hex rendering and crash smidump or other consumers. Exploitation requires the victim to load the malicious MIB (UI:P per CVSS 4.0; UI:R per independent CVSS 3.1 assessment) and is limited to local memory corruption with high availability impact and low integrity impact. Publicly available exploit code exists.
Out-of-bounds write in libsmi through 0.5.0 allows attackers to corrupt adjacent library globals via a crafted MIB file that supplies an OCTET STRING DEFVAL of 512 or more octets beginning with a 0x00 byte, causing smiValueAsString() to overflow a fixed 1024-byte static buffer during hex rendering and crash smidump or other consumers. Exploitation requires the victim to load the malicious MIB (UI:P per CVSS 4.0; UI:R per independent CVSS 3.1 assessment) and is limited to local memory corruption with high availability impact and low integrity impact. Publicly available exploit code exists.