CVE-2026-113881:详情

CVE-2026-113881

2026-10-27
16h17 +00:00
2026-11-04
21h17 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

A stack-based buffer overflow vulnerability in Fireware OS's VPN Network Access Enforcement process allows an authenticated mobile VPN user to create a denial of service condition and potentially execute arbitrary code as an unprivileged process by sending a specially crafted request.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-121 Stack-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the stack.
CWE-129 Improper Validation of Array Index
The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

参考资料