What is CVE-2026-71979?
INDI indiserver up to version 2.2.4.2 contains a stack buffer overflow vulnerability triggered by malformed XML with element tag names exceeding 1024 bytes, allowing unauthenticated remote attackers to crash the daemon. Affected users should update to the version fixed in commit 96bbd7f.
Azərbaycanca: INDI indiserver 2.2.4.2 versiyasına qədər olan versiyalarda, 1024 baytdan uzun XML etiket adları göndərildikdə stack buffer overflow yaranır ki, bu da autentifikasiya olunmamış uzaqdan hücum edənə daemon-un çökməsinə səbəb ola bilər. Zərərçəkən istifadəçilər commit 96bbd7f ilə düzəldilmiş versiyaya yeniləmə etməlidirlər.
Related CVEs
link basis: same weakness class CWE-119
FAQ2
Which versions of INDI indiserver are affected by CVE-2026-71979?
All versions up to 2.2.4.2 are affected.
How can CVE-2026-71979 be exploited?
An unauthenticated remote attacker can send malformed XML with element tag names exceeding 1024 bytes to trigger a stack buffer overflow, causing the daemon to crash.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.