Read the docs
TI-2026-80947 Aliases CVE-2026-116738GHSA-rhj9-fcgr-5r62

Stack-based buffer overflow in VMime uuencode decoder

Priority MEDIUM 47CWE-121Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Passive
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-121 and the CVSS impact.

Summary

VMime through 0.9.2 contains an integer underflow in the uuEncoder::decode function. A remote attacker can trigger a stack-based buffer overflow (CWE-121) by sending an email with a crafted uuencoded MIME part. The corrupted stack memory can crash the application or potentially execute code.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Description from the CNA

VMime through 0.9.2 contains an integer underflow in the uuEncoder::decode function that allows remote attackers to trigger a stack-based buffer overflow via crafted uuencoded MIME parts. Attackers can send an email with a uuencoded line whose length character is 'b' but is not a 'begin' line, corrupting stack memory to crash the application or potentially execute code.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00725 54th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
kislivmimeup to 0.9.2—No fix listedCNA
  • vmime Vendorkisli Affected up to 0.9.2 Fixed in — No fix listed CNA

Remediation

The sources list no fixed version for VMime.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Timeline

  1. 2026-10-26 Threatist record created from CVE-2026-116738
  2. 2026-10-27 CISA SSVC decision points changed
  3. 2026-10-27 Alias added: GHSA-rhj9-fcgr-5r62

References

Patch 2

Advisory 1

Other 2

  • TI-2026-80948 Uninitialized stack memory disclosure in VMime uuencode decoder CVSS 4.0MEDIUM 5.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences