PatchSiren

hashcat CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM hashcat CVE published 2026-08-17

CVE-2026-68765

The CVE-2026-68765 vulnerability is a heap buffer overflow in the KeePass AESKDF/KDBX v4 module of hashcat master branch builds after v7.1.2. This vulnerability allows attackers to corrupt adjacent heap memory by supplying an oversized ninth hash field token. The module accepts up to 600 hex characters for the ninth token field but decodes it into a fixed 256-byte buffer with no length check, potentially [truncated]