CVE-2026-58096 | FreeBSD PPP up to p2/p8/p12 LCP Configuration Decoder LcpDecodeConfig out-of-bounds write

A vulnerability, which was classified as very critical, was found in FreeBSD PPP up to p2/p8/p12. Affected by this vulnerability is the function LcpDecodeConfig of the component LCP Configuration Decoder. The manipulation results in out-of-bounds write.

This vulnerability is known as CVE-2026-58096. It is possible to launch the attack remotely. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More