PT-2026-24934 · Rxi · Fe

Oneafter · Publicado 2026-03-12 · Atualizado 2026-03-13 · CVE-2026-4012

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Baixa

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions rxi fe versions prior to ed4cda96bd582cbb08520964ba627efb40f3dd91

Description A flaw exists in the read function within the src/fe.c file of rxi fe. Providing the input 1 to this function can trigger an out-of-bounds read. Local access is required for exploitation. The exploit for this issue has been publicly disclosed and may be used. The software employs a rolling release model, meaning specific version details for affected or updated releases are unavailable. The project maintainers were notified of the issue but have not yet responded.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Buffer Overflow

Enumeração de Fraquezas

CWE-125

CWE-119

Identificadores relacionados

CVE-2026-4012

Produtos afetados

Fe

Referências · 11

• 🔥 https://github.com/oneafter/0211/blob/main/fe/repro · Exploit
• https://github.com/rxi/fe/issues/34 · Nota
• https://vuldb.com/?id.350534 · Nota
• https://twitter.com/CVEnew/status/2032410976881164651 · Publicação no Twitter
• https://github.com/rxi/fe · Nota
• https://t.me/cveNotify/155242 · Publicação no Telegram
• https://twitter.com/CVEarity/status/2032099950201618553 · Publicação no Twitter
• https://vuldb.com/?ctiid.350534 · Nota
• https://t.me/CVEtracker/47241 · Publicação no Telegram
• https://vuldb.com/?submit.769774 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-4012 · Nota de Segurança