Cpe:2.3:a:vmime:vmime:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3avmimevmime/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 26 Oct 2026 23:47:30 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgVMime: Stack-based buffer overflow in uuEncoder::decode (CVE-2026-116738)https://feed.craftedsignal.io/briefs/2026-10-vmime-integer-underflow/Mon, 26 Oct 2026 23:47:30 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-vmime-integer-underflow/VMime version 0.9.2 and earlier contains an integer underflow vulnerability in the uuEncoder::decode function, allowing remote attackers to trigger a stack-based buffer overflow via crafted uuencoded MIME parts.VMime library versions through 0.9.2 are susceptible to an integer underflow within the uuEncoder::decode function. This flaw is triggered when an application processes a crafted uuencoded MIME part where a line begins with the length character 'b' but does not constitute a valid 'begin' line. This input corruption leads to a stack-based buffer overflow, which can result in application denial of service or potential remote code execution.

Impact

Successful exploitation allows remote attackers to corrupt stack memory. The primary observed impact is application instability, with a theoretical potential for arbitrary code execution depending on the host application implementation.

Recommendation

  • Inventory systems and applications that utilize the VMime library (up to 0.9.2).
  • Prioritize upgrading the VMime library to a patched version once released by the maintainers.
  • Implement email filtering or MIME-parsing pre-processors to inspect and discard malformed uuencoded MIME parts that match the length character 'b' logic identified as malicious.
]]>highadvisory