CVE-2026-68765

Name of the Vulnerable Software and Affected Versions hashcat versions after 7.1.2

Description A heap buffer overflow exists in the KeePass AESKDF/KDBX v4 module (module 34301). The issue occurs when the module processes the ninth hash field token; while it accepts up to 600 hex characters, it decodes this data into a fixed 256-byte buffer without performing a length check. This allows an oversized input to write up to 44 bytes beyond the buffer boundary into adjacent esalt fields and heap chunk metadata, which can lead to heap corruption or memory access violations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.