Skip to content

Product

netbsd/src vulnerabilities

2 published CVES affecting netbsd/src, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
2
Low
0
Unscored
0
CISA KEV
0

Latest netbsd/src CVEs

Newest publication first

  1. CVE-2026-32848 NetBSD cryptodev Race Condition Double-Free via cryptodev_op()

    Published
    MediumCVSS 5.7

    NetBSD prior to commit ec8451e contains a race condition vulnerability in cryptodev_op() within the opencrypto subsystem that allows local attackers to trigger a double-free condition by concurrently issuing CIOCCRYPT operations on the same session identifier on SMP systems. Atta...

  2. CVE-2026-32849 NetBSD Signed Integer Overflow in cryptodev_op via cryptodev.c

    Published
    MediumCVSS 5.7

    NetBSD prior to commit ec8451e contains a signed integer overflow vulnerability in the cryptodev_op() function in sys/opencrypto/cryptodev.c where the local variable iov_len is declared as a signed int but assigned from an unsigned cop->dst_len value, causing undefined behavior w...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.