CVE-2026-115679
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
Arm Keil MDK-Middleware version 8.3.0 may allow out-of-bounds reads and writes to the FTP Server RX buffer. The issue affects the library's FTP server component.
Risk Assessment
This may lead to memory corruption, service crashes, or potential unintended code execution in embedded devices using the FTP server. The risk affects systems with an exposed FTP server.
Recommendation
Update Arm Keil MDK-Middleware to a version newer than 8.3.0 if available, or disable the FTP server if it is not required.
Other vulnerabilities in Arm Keil MDK-Middleware
See all- CVE-2026-115680Medium
Arm Keil MDK-Middleware versions 8.0.0–8.3.0 may allow DHCPv6 Option-Walk over-reads and unintended data retransmission. The issue affects the library's network stack.
- CVE-2026-115678Medium
Arm Keil MDK-Middleware versions 8.0.0–8.3.0 may allow a pre-authentication out-of-bounds read in SNMP processing. The issue affects the library's SNMP component.
Original NVD description (English source)
Arm Keil MDK-Middleware 8.3.0 may allow out-of-bounds reads and writes to the FTP Server RX Buffer
Vulnerability data from NVD (NIST) · CISA KEV · EPSS