CVE-2026-71979

Name of the Vulnerable Software and Affected Versions indiserver versions prior to 2.2.4.3

Description A stack buffer overflow occurs when the daemon processes malformed XML with mismatched tags exceeding 1024 bytes. An unauthenticated remote attacker can send a single TCP packet on port 7624 to trigger an unbounded sprintf() write into a fixed 1024-byte stack buffer within MsgQueue.cpp. This action terminates the daemon and disrupts all active client and driver sessions.

Recommendations Update indiserver to the version containing commit 96bbd7f.