CVE-2026-42953
HighCVSS 8.4Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
The application contains an out-of-bounds write vulnerability that can be exploited by an attacker to write data past the end of an allocated memory buffer. This can lead to arbitrary code execution.
Risk Assessment
The risk for the organization includes the possibility of remote code execution, which could lead to system compromise, data theft, or service disruption.
Recommendation
It is recommended to immediately update the application to the latest version that fixes this vulnerability and implement memory protection mechanisms such as ASLR and DEP.
Original NVD description (English source)
The application contains an out-of-bounds write vulnerability that can be exploited by an attacker to cause the program to write data past the end of an allocated memory buffer. This can lead to arbitrary code execution.