{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/vmime/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:vmime:vmime:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-116738"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["VMime (\u003c= 0.9.2)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["VMime"],"content_html":"\u003cp\u003eVMime library versions through 0.9.2 are susceptible to an integer underflow within the \u003ccode\u003euuEncoder::decode\u003c/code\u003e function. This flaw is triggered when an application processes a crafted uuencoded MIME part where a line begins with the length character 'b' but does not constitute a valid 'begin' line. This input corruption leads to a stack-based buffer overflow, which can result in application denial of service or potential remote code execution.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows remote attackers to corrupt stack memory. The primary observed impact is application instability, with a theoretical potential for arbitrary code execution depending on the host application implementation.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory systems and applications that utilize the VMime library (up to 0.9.2).\u003c/li\u003e\n\u003cli\u003ePrioritize upgrading the VMime library to a patched version once released by the maintainers.\u003c/li\u003e\n\u003cli\u003eImplement email filtering or MIME-parsing pre-processors to inspect and discard malformed uuencoded MIME parts that match the length character 'b' logic identified as malicious.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-26T23:47:30Z","date_published":"2026-10-26T23:47:30Z","id":"https://feed.craftedsignal.io/briefs/2026-10-vmime-integer-underflow/","summary":"VMime version 0.9.2 and earlier contains an integer underflow vulnerability in the uuEncoder::decode function, allowing remote attackers to trigger a stack-based buffer overflow via crafted uuencoded MIME parts.","title":"VMime: Stack-based buffer overflow in uuEncoder::decode (CVE-2026-116738)","url":"https://feed.craftedsignal.io/briefs/2026-10-vmime-integer-underflow/"}],"language":"en","title":"CraftedSignal Threat Feed - VMime","version":"https://jsonfeed.org/version/1.1"}