CVE-2026-121511: Out-of-bounds Read in µD3TN

Published Nov 3, 2026

Updated

Heap Out-of-Bounds Read in µD3TN BPv6/BPv7 Fragmenter allows Local Attacker to Read Memory and Reliably Cause DoS

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade µD3TN to a version that resolves this vulnerability.
Fixed in 0.15.2

Event History

Nov 3, 2026

CVE Published

via MITRE·02:18 PM

Data Sourced

via MITRE·02:18 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via OSV·02:18 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is exposed to this issue?

Systems running µD3TN with the BPv6/BPv7 Fragmenter are exposed. The vulnerability requires local access and low privileges, so it is most relevant where untrusted or minimally privileged local users can interact with the affected service or host.

What can an attacker achieve?

A local attacker can read memory outside the intended heap bounds and reliably cause a denial of service. The available information indicates high confidentiality and availability impact, with no integrity impact stated.

Does exploitation require user interaction or complex conditions?

No user interaction is required. The listed attack complexity is low, and the attacker needs only low-level local privileges.

CVE-2026-121511: Out-of-bounds Read in µD3TN

Remediation

Event History

Frequently Asked Questions

Who is exposed to this issue?

What can an attacker achieve?

Does exploitation require user interaction or complex conditions?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What can an attacker achieve?

Does exploitation require user interaction or complex conditions?