CVE-2026-93857 : 詳細

CVE-2026-93857

2026-10-27
16h17 +00:00
Overflow
2026-10-29
11h17 +00:00
特定のCVEの通知
特定のCVEの変更情報をいち早くお届けします。
通知を管理する

CVE の説明

A stack-based buffer overflow vulnerability in Fireware OS's SIP proxy allows a remote, unauthenticated attacker to execute arbitrary code by sending a specially crafted request through a policy that uses the SIP proxy.

CVE の情報

関連する弱点

CWE-ID 弱点名 出典
CWE-120 Buffer Copy without Checking Size of Input
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
CWE-121 Stack-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the stack.
CWE-787 Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

参考資料