CVE-2026-70456: rsync 3.0.1 < 3.5.0 Heap Out-of-Bounds Write via read_args()
Published Aug 13, 2026
·Updated
rsync 3.0.1 before 3.5.0 contains an out-of-bounds write vulnerability in the readargs() function that allows a malicious sender to corrupt adjacent heap memory by sending a crafted argument list. When the argument count causes the argv allocation to be exactly full, the trailing NULL terminator is written one slot beyond the allocation boundary, corrupting adjacent heap memory.
Affected Software
1 affected component
rsync rsync>3.0.1<=3.5.0
Event History
Aug 13, 2026
CVE Published
via MITRE·02:44 PM
Data Sourced
via MITRE·02:44 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-70456?
The severity of CVE-2026-70456 is rated high with a CVSS score of 8.2.
2
How do I fix CVE-2026-70456?
To fix CVE-2026-70456, upgrade rsync to version 3.5.0 or later.
3
What type of vulnerability is CVE-2026-70456?
CVE-2026-70456 is a heap out-of-bounds write vulnerability affecting rsync.
4
Who is affected by CVE-2026-70456?
Users of rsync versions prior to 3.5.0 are affected by CVE-2026-70456.
5
What can be exploited in CVE-2026-70456?
CVE-2026-70456 can be exploited by a malicious sender to corrupt adjacent heap memory.