CVE-2026-103680

Name of the Vulnerable Software and Affected Versions tnef (affected versions not specified)

Description A heap-based buffer overflow occurs in the find free number() function during the generation of numbered backup suffixes for duplicate filenames. When numbered backups are enabled and file overwriting is disabled, a specially crafted Transport Neutral Encapsulation Format (TNEF) file containing an excessive number of colliding attachment filenames can cause the numeric counter to write beyond the allocated memory buffer. This may lead to an application crash, resulting in a Denial of Service (DoS), or potentially allow arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.