CVE-2026-70368

Name of the Vulnerable Software and Affected Versions stunnel (affected versions not specified)

Description A stack-based out-of-bounds read occurs in the s vlog() function when processing oversized log messages using vsnprintf(). A remote attacker with network access can provide protocol inputs that generate a log message exceeding 1024 bytes, resulting in an out-of-bounds stack read and a potential system crash. In specific scenarios, this issue may allow the replacement of trailing newline characters with null terminators.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.