CVE-2026-44673

HighCVSS 7.5

Published: 14/05/2026(UTC)Updated: 09/09/2026(UTC)Translated: 16/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.52%

42th percentile - higher than 42% of all known CVEs

Summary

In libyang library prior to SO 5.2.15, an integer overflow in lyb_read_string() in src/parser_lyb.c leads to a heap buffer overflow when parsing a maliciously crafted LYB binary blob. An attacker who can supply LYB data to any libyang consumer (NETCONF server, sysrepo, etc.) can trigger a crash or potential heap corruption.

Risk Assessment

The risk for the organization includes potential remote code execution or service crashes in network services using libyang, which could lead to infrastructure downtime and data integrity compromise.

Recommendation

It is recommended to immediately upgrade libyang to version SO 5.2.15 or later, which contains the fix for this vulnerability. Additionally, restrict LYB data input to trusted sources only.

Other vulnerabilities in libyang

CVE-2026-41401Medium
libyang before version 5.2.6 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly updates metadata list pointers when freeing non-head default metadata entries. Attackers can submit crafted YANG XML documents, potentially causing process crashes or code execution.

Original NVD description (English source)

libyang is a YANG data modeling language library. Prior to SO 5.2.15, lyb_read_string() in src/parser_lyb.c contains an integer overflow that results in a heap buffer overflow when parsing a maliciously crafted LYB binary blob. An attacker who can supply LYB data to any libyang consumer (NETCONF server, sysrepo, etc.) can trigger a crash or potential heap corruption. This vulnerability is fixed in SO 5.2.15.