CVE-2026-108985 | sahlberg libnfs up to 6.0.2 ZDR Decoding lib/libnfs-zdr.c maxsize out-of-bounds write

SecurityVulns
Yanac

A vulnerability identified as problematic has been detected in sahlberg libnfs up to 6.0.2. This affects the function libnfs_zdr_bytes/libnfs_zdr_string/libnfs_zdr_array of the file lib/libnfs-zdr.c of the component ZDR Decoding. This manipulation of the argument maxsize causes out-of-bounds write.

This vulnerability appears as CVE-2026-108985. The attack may be initiated remotely. There is no available exploit.

To fix this issue, it is recommended to deploy a patch.VulDB Recent EntriesRead More