vmime vulnerabilities
CVEs whose affected-version data names the vmime package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-116738High· 8.8VMime through 0.9.2 Stack-Based Buffer Overflow via uuencode Decoder
VMime through 0.9.2 contains an integer underflow in the uuEncoder::decode function that allows remote attackers to trigger a stack-based buffer overflow via crafted uuencoded MIME parts. Attackers can send an email with a uuencoded line…
▾ Twilightkisli · vmimeEPSS 0.73%via CVEORG
CVE-2026-116739Medium· 4.3VMime through 0.9.2 Uninitialized Stack Memory Disclosure via uuencode Decoder
VMime through 0.9.2 contains an information disclosure vulnerability in the uuEncoder::decode function that writes uninitialized stack memory into decoded output for over-long lines. Attackers can send a crafted uuencode or x-uuencode MI…
▾ Sunlitkisli · vmimeEPSS 0.25%via CVEORG