CVE-2026-116738: VMime through 0.9.2 Stack-Based Buffer Overflow via uuencode Decoder
VMime through 0.9.2 contains an integer underflow in the uuEncoder::decode function that allows remote attackers to trigger a stack-based buffer overflow via crafted uuencoded MIME parts. Attackers can send an email with a uuencoded line whose length character is 'b' but is not a 'begin' line, corrupting stack memory to crash the application or potentially execute code.
Affected Software
Event History
Frequently Asked Questions
What attacker interaction is required to trigger this issue?
An attacker needs to send a crafted email containing a uuencoded MIME part. The malicious uuencoded line must use 'b' as its length character and must not be a 'begin' line; no attacker privileges are required, but a user or system must process the email.
What is the likely impact if a vulnerable application processes the message?
The crafted MIME part can corrupt stack memory through a stack-based buffer overflow. This can crash the application and may allow code execution.
Which deployments should be prioritized for remediation?
Prioritize applications that use VMime to parse or decode uuencoded MIME email content, especially where messages from untrusted senders are processed. The affected range includes VMime through version 0.9.2.