CVE-2026-18938

Name of the Vulnerable Software and Affected Versions p11-kit (affected versions not specified)

Description A local attacker or one with access to a reachable RPC channel can exploit an integer overflow. By sending specially crafted messages, the attacker can cause the system to miscalculate memory allocation for nested attributes, leading to a heap out-of-bounds write. This memory corruption can crash the RPC parsing process, resulting in a Denial of Service (DoS). This issue is only exploitable on 32-bit systems.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.