{"id":"CVE-2026-116738","title":"VMime through 0.9.2 Stack-Based Buffer Overflow via uuencode Decoder","summary":"VMime through 0.9.2 contains an integer underflow in the uuEncoder::decode function that allows remote attackers to trigger a stack-based buffer overflow via crafted uuencoded MIME parts. Attackers can send an email with a uuencoded line…","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-121"],"vendor":"kisli","product":"vmime","affected":["vmime <= 0.9.2"],"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"total","timestamp":"2026-10-27T13:52:10.451418Z"},"published":"2026-10-26","updated":"2026-10-27","sourceUpdated":"2026-10-27T14:16:56.633Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-116738","references":[{"url":"https://github.com/kisli/vmime/pull/363","label":"Pull Request #363"},{"url":"https://github.com/kisli/vmime/commit/e85925eddc638939f0eeb7ee55ec047d04a760d8","label":"Patch Commit"},{"url":"https://github.com/kisli/vmime"},{"url":"https://github.com/kisli/vmime/blob/v0.9.2/src/vmime/utility/encoder/uuEncoder.cpp#L185-L190"},{"url":"https://hackmd.io/@haindpwn/vmime-uuencode-decoder-oob-write"},{"url":"https://www.vulncheck.com/advisories/vmime-through-0.9.2-stack-based-buffer-overflow-via-uuencode-decoder","label":"VulnCheck Advisory: VMime through 0.9.2 Stack-Based Buffer Overflow via uuencode Decoder"}],"tags":["cve.org"],"epss":0.00725,"epssPercentile":0.5386,"ingestedAt":"2026-10-27T16:11:59.452Z","slug":"CVE-2026-116738","body":"## Overview\n\nVMime through 0.9.2 contains an integer underflow in the uuEncoder::decode function that allows remote attackers to trigger a stack-based buffer overflow via crafted uuencoded MIME parts. Attackers can send an email with a uuencoded line whose length character is 'b' but is not a 'begin' line, corrupting stack memory to crash the application or potentially execute code.\n\n## Affected\n\n- `vmime <= 0.9.2`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":49,"depthScoreParts":{"impact":48.4,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}