CVE-2026-84269

Name of the Vulnerable Software and Affected Versions gvfs (affected versions not specified)

Description A flaw exists in the AFP backend of gvfs. When mounting a share, a malicious AFP server can cause the DSI read path to process a length that exceeds the size requested by the client. Because the system does not verify the server-provided length against the pre-sized reply buffer, the operation accesses memory past the intended boundaries. This leads to a heap buffer overflow—a condition where data exceeds the allocated memory buffer on the heap—which can crash the gvfsd-afp process and result in a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.