No VulnCrest analysis published for this CVE yet. Below is the original CNA/NVD description, unmodified.
Description
CESNET ipfixcol2 2.7.1 before 2.9.0 contains a heap-based buffer overflow in Lz4Decoder.cpp that allows unauthenticated network peers to write past heap buffers. Attackers can declare a small ring buffer_size followed by a large decompressed_size to write up to 65535 controlled bytes and crash the collector.
Exploits & detection
No public PoC or detection template found yet.
Timeline
- Published: 04 Nov 2026
- Last modified upstream: 04 Nov 2026
Sources & licenses
- CVE / CVSS / CWE
- NVD record ↗ (unmodified). This product uses the NVD API but is not endorsed or certified by the NVD. CVE® © The MITRE Corporation.
- Exploitation
- CISA KEV (CC0) · EPSS by FIRST.org
- References used for the analysis
- https://github.com/CESNET/ipfixcol2
- https://github.com/CESNET/ipfixcol2/blob/v2.8.0/src/plugins/input/tcp/src/Lz4Decoder.cpp#L139-L151
- https://github.com/CESNET/ipfixcol2/commit/fd5cb168efb4b864d33f655174711b2779cef502
- https://github.com/CESNET/ipfixcol2/releases/tag/v2.9.0
- https://www.vulncheck.com/advisories/cesnet-ipfixcol2-2.7.1-before-2.9.0-heap-buffer-overflow-via-tcp-lz4-decoder
- Analysis, summary and remediation
- © VulnCrest