CVE-2026-0171
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
In multiple locations, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed.
Risk Assessment
A remote attacker could execute arbitrary code in the context of the vulnerable process, potentially leading to system compromise. No user interaction is required.
Recommendation
Update the vulnerable component to a version that fixes the logic error. Consider deploying additional memory protection mechanisms.
Other vulnerabilities in Multiple components
Original NVD description (English source)
In multiple locations, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS