CVE-2026-70456: rsync 3.0.1 < 3.5.0 Heap Out-of-Bounds Write via read_args()
rsync 3.0.1 < 3.5.0 Heap Out-of-Bounds Write via readargs()
Other sources
rsync 3.0.1 before 3.5.0 contains an out-of-bounds write vulnerability in the readargs() function that allows a malicious sender to corrupt adjacent heap memory by sending a crafted argument list. When the argument count causes the argv allocation to be exactly full, the trailing NULL terminator is written one slot beyond the allocation boundary, corrupting adjacent heap memory.
— NVD
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 3.5.0-1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-70456?
The severity of CVE-2026-70456 is rated high with a CVSS score of 8.2.
How do I fix CVE-2026-70456?
To fix CVE-2026-70456, upgrade rsync to version 3.5.0 or later.
What type of vulnerability is CVE-2026-70456?
CVE-2026-70456 is a heap out-of-bounds write vulnerability affecting rsync.
Who is affected by CVE-2026-70456?
Users of rsync versions prior to 3.5.0 are affected by CVE-2026-70456.
What can be exploited in CVE-2026-70456?
CVE-2026-70456 can be exploited by a malicious sender to corrupt adjacent heap memory.