CVE-2026-110712

Name of the Vulnerable Software and Affected Versions libsmb2 versions prior to 6.2

Description A heap out-of-bounds read occurs in the smb2 decode file all info() function. This issue allows a malicious SMB server or an attacker performing a man-in-the-middle attack on unsigned sessions to crash the client by sending a crafted FileAllInformation reply with an unchecked FileNameLength variable during smb2 stat or smb2 fstat calls.

Recommendations Update to version 6.2 or later.