CVE-2026-68767

Name of the Vulnerable Software and Affected Versions hashcat (affected versions not specified)

Description The fgetl() function in src/filehandling.c contains an out-of-bounds heap write. This occurs when the function writes a null terminator one byte beyond the caller's buffer if an input line is exactly the buffer length. An attacker can trigger this issue by providing a wordlist, potfile, or hash file containing a line of exactly HCBUFSIZ LARGE bytes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.