Out-of-bounds write in FreeBSD - CVE-2026-58096
Published: August 26, 2026
Vulnerability identifier: #VU145745
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-58096
CWE-ID: CWE-787
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to execute arbitrary code.
The vulnerability exists due to an out-of-bounds write in LcpDecodeConfig() when processing a received endpoint discriminator option with an undersized length. A remote attacker can send a specially crafted endpoint discriminator option to execute arbitrary code.
The issue can also crash ppp(8). The vulnerable condition is triggered when the option length is below the minimum required by RFC 1717.
Affected software
FreeBSD
How to mitigate CVE-2026-58096
Install security update from vendor's website.