HIGH
indilib
CVE published 2026-08-17
CVE-2026-71979
A stack buffer overflow vulnerability exists in INDI indiserver through 2.2.4.2, which allows unauthenticated remote attackers to crash the daemon by sending malformed XML with mismatched tags whose names exceed 1024 bytes. The vulnerability can be triggered by sending a single TCP packet on port 7624 with mismatched XML tags, leading to an unbounded sprintf() write into a fixed 1024-byte stack buffer in [truncated]