PatchSiren

kisli CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM kisli CVE published 2026-10-26

CVE-2026-116739

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-10-26T21:52:38.496Z and has not been modified since then. This vulnerability in VMime through 0.9.2 is an information disclosure issue in the uuEncoder::decode function, which writes uninitialized stack memory into decoded output for over-long lines. Defenders should assess exposure and prioritize patc [truncated]

HIGH kisli CVE published 2026-10-26

CVE-2026-116738

A stack-based buffer overflow vulnerability exists in VMime through 0.9.2 due to an integer underflow in the uuEncoder::decode function. This allows remote attackers to potentially execute code or crash the application by sending crafted uuencoded MIME parts via email. The vulnerability is caused by an integer underflow in the uuEncoder::decode function, which can lead to a stack-based buffer overflow. Th [truncated]