CVE-2026-101290: High severity vulnerability
A remote attacker may send a specially crafted network packet that causes the affected application to perform an out-of-bounds memory read due to insufficient validation of packet length. This may result in an application crash and a denial-of-service condition.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.0.5
Event History
Frequently Asked Questions
What access does an attacker need to trigger the denial of service?
The issue is remotely exploitable over the network. It requires no privileges or user interaction, but the attacker must be able to send a specially crafted packet to the affected application.
What is the expected impact if exploitation succeeds?
A malformed packet can cause an out-of-bounds memory read and crash the affected application. The stated impact is denial of service; no confidentiality or integrity impact is specified.