CVE-2026-116738 Details
Description
VMime through 0.9.2 contains an integer underflow in the uuEncoder::decode function that allows remote attackers to trigger a stack-based buffer overflow via crafted uuencoded MIME parts. Attackers can send an email with a uuencoded line whose length character is 'b' but is not a 'begin' line, corrupting stack memory to crash the application or potentially execute code.
A stack-based buffer overflow vulnerability has been identified in the VMime library, specifically in versions through 0.9.2. The issue arises within the uuEncoder::decode function, where an integer underflow allows remote attackers to manipulate the decoding of uuencoded MIME parts. By crafting an email with a uuencoded line that includes a length character of 'b' (indicating a 'begin' line) but does not conform to the expected format, attackers can exploit this flaw. The resulting memory corruption can lead to application crashes or potentially allow for arbitrary code execution.
Users can update to VMime version 0.9.2 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 26, 2026CISA-ADP
Assessed Oct 27, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/kisli/vmime | [email protected] | ProductSource CodeVendor |
| https://github.com/kisli/vmime/blob/v0.9.2/src/vmime/utility/encoder/uuEncoder.cpp#L185-L190 | [email protected] | Source CodeVendor |
| https://github.com/kisli/vmime/commit/e85925eddc638939f0eeb7ee55ec047d04a760d8 | [email protected] | Source CodeVendor |
| https://github.com/kisli/vmime/pull/363 | [email protected] | Issue TrackingVendor |
| https://hackmd.io/@haindpwn/vmime-uuencode-decoder-oob-write | [email protected] | BundleExploitRemedyTechnical Analysis |
| https://www.vulncheck.com/advisories/vmime-through-0.9.2-stack-based-buffer-overflow-via-uuencode-decoder | [email protected] | AdvisoryBundle |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-121 | Stack-based Buffer Overflow | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| VMime | <= 0.9.2 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 27, 2026 | CVE Modified | CISA-ADP |
| Oct 26, 2026 | New CVE Received | [email protected] |