kisli vulnerabilities

Products

• kisli/vmime 2

Latest kisli CVEs

Newest publication first

1. CVE-2026-116739 VMime through 0.9.2 Uninitialized Stack Memory Disclosure via uuencode Decoder

   Published 2026-10-26

   Medium·CVSS 5.3 EPSS 0.25%

   VMime through 0.9.2 contains an information disclosure vulnerability in the uuEncoder::decode function that writes uninitialized stack memory into decoded output for over-long lines. Attackers can send a crafted uuencode or x-uuencode MIME part with a large line length byte to le...

2. CVE-2026-116738 VMime through 0.9.2 Stack-Based Buffer Overflow via uuencode Decoder

   Published 2026-10-26

   High·CVSS 8.7 EPSS 0.73%

   VMime through 0.9.2 contains an integer underflow in the uuEncoder::decode function that allows remote attackers to trigger a stack-based buffer overflow via crafted uuencoded MIME parts. Attackers can send an email with a uuencoded line whose length character is 'b' but is not a...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.