CVE-2026-118384Medium· 6.1▾ SunlitGNU mtools through 4.0.49 has an out-of-bounds write in parse_vses in vfat.c.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 33.6 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 28.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.3%
Last analysed / modified upstream
GNU mtools through 4.0.49 has an out-of-bounds write in parse_vses in vfat.c.
mtools <= 4.0.49Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-56968Low· 3.7GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory disclosure via a crafted server.
CVE-2026-111167Medium· 6.1GNU LibreDWG through 0.14.8612 contains a global out-of-bounds read vulnerability in the AcDs decoder acds_private() that allows attackers to read beyond a static table via an unchecked schema property type index
CVE-2025-8224Low· 3.3A vulnerability has been found in GNU Binutils 2.44 and classified as problematic
CVE-2025-7546Medium· 5.3A vulnerability, which was classified as problematic, has been found in GNU Binutils 2.45
CVE-2025-7545Medium· 5.3A vulnerability classified as problematic was found in GNU Binutils 2.45
CVE-2025-5245Medium· 5.3A vulnerability classified as critical has been found in GNU Binutils up to 2.44