CVE-2026-66349

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description The MMS server connection handler contains a flaw in the processing of BER-encoded request data. When an MMS confirmed request PDU (Protocol Data Unit) containing an extended BER tag is received over an established session, the decoder may advance its internal buffer incorrectly due to a missing bounds check. This leads to a one byte heap out-of-bounds read, causing the MMS service process to terminate and resulting in a denial-of-service condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.