CVE-2026-48291
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
Format Plugins versions 1.1.2 and earlier are affected by a heap-based buffer overflow vulnerability that could allow arbitrary code execution in the context of the current user. User interaction is required – opening a malicious file.
Risk Assessment
The risk includes system compromise through arbitrary code execution, potentially leading to data theft or further privilege escalation.
Recommendation
Update Format Plugins to the latest available version that fixes this vulnerability.
Other vulnerabilities in Format Plugins
See all- CVE-2026-48372High
Format Plugins is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file).
- CVE-2026-48292High
Format Plugins versions 1.1.2 and earlier are affected by a heap-based buffer overflow vulnerability that could allow arbitrary code execution in the context of the current user. User interaction is required – opening a malicious file.
Original NVD description (English source)
Format Plugins versions 1.1.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.