PT-2026-28748

CVE-2026-5037

Publicado

2026-01-01

Atualizado

2026-04-11

Descrição por

CVSS 3.1

3.3

Baixa

MétricasAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions mxml versions up to 4.0.4

Description A flaw exists in mxml up to version 4.0.4 related to a stack-based buffer overflow. The issue resides within the index sort function in the mxml-index.c file, specifically within the mxmlIndexNew component. Manipulation of the tempr argument can trigger the overflow, limiting exploitation to local execution. The exploit has been publicly disclosed.

Recommendations Apply patch 6e27354466092a1ac65601e01ce6708710bb9fa5 to remediate this issue.

Explorabilidade

Exploit

Correção

Impactos

Pesquisadores

Mthg

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-121: Stack-based Buffer Overflow