CVE-2026-43856: Buffer Overflow
Published Oct 20, 2026
·Updated
A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes.
Event History
Oct 20, 2026
CVE Published
via MITRE·09:16 AM
Data Sourced
via MITRE·09:16 AM
RemedyDescription
Data Sourced
via NVD·10:17 AM
DescriptionSeverity
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The attacker must be remotely authenticated and able to supply a path longer than 1024 bytes to FileProcess::CheckDir.
2
What is the likely impact of successful exploitation?
Successful exploitation could allow arbitrary code execution.