CVE-2026-116738
VMime through 0.9.2 Stack-Based Buffer Overflow via uuencode Decoder
kisli vmime
CVSS
8.7HighExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Description
VMime through 0.9.2 contains an integer underflow in the uuEncoder::decode function that allows remote attackers to trigger a stack-based buffer overflow via crafted uuencoded MIME parts. Attackers can send an email with a uuencoded line whose length character is 'b' but is not a 'begin' line, corrupting stack memory to crash the application or potentially execute code.
Text from CVE List
Affected versions 1
- vmimeaffected: all versions through 0.9.2CVE List
References 6
- github.com/kisli/vmime/pull/363Fixvia CVE List
- github.com/kisli/vmime/commit/e85925eddc638939f0eeb7ee55ec047d04a760d8Fixvia CVE List
- hackmd.io/@haindpwn/vmime-uuencode-decoder-oob-writeAdvisoryvia CVE List
- vulncheck.com/advisories/vmime-through-0.9.2-stack-based-buffer-overflow-via-uuencode-decoderAdvisoryvia CVE List
- github.com/kisli/vmimeReferencevia CVE List
- github.com/kisli/vmime/blob/v0.9.2/src/vmime/utility/encoder/uuEncoder.cpp#L185-L190Referencevia CVE List