PT-2026-24934 · Rxi · Fe

Oneafter · Published 2026-03-12 · Updated 2026-03-13 · CVE-2026-4012

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions rxi fe versions prior to ed4cda96bd582cbb08520964ba627efb40f3dd91

Description A flaw exists in the read function within the src/fe.c file of rxi fe. Providing the input 1 to this function can trigger an out-of-bounds read. Local access is required for exploitation. The exploit for this issue has been publicly disclosed and may be used. The software employs a rolling release model, meaning specific version details for affected or updated releases are unavailable. The project maintainers were notified of the issue but have not yet responded.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Buffer Overflow

Weakness Enumeration

CWE-125

CWE-119

Related Identifiers

CVE-2026-4012

Affected Products

Fe

References · 11

• 🔥 https://github.com/oneafter/0211/blob/main/fe/repro · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4012 · Security Note
• https://github.com/rxi/fe/issues/34 · Note
• https://vuldb.com/?id.350534 · Note
• https://twitter.com/CVEnew/status/2032410976881164651 · Twitter Post
• https://github.com/rxi/fe · Note
• https://t.me/cveNotify/155242 · Telegram Post
• https://twitter.com/CVEarity/status/2032099950201618553 · Twitter Post
• https://vuldb.com/?ctiid.350534 · Note
• https://t.me/CVEtracker/47241 · Telegram Post
• https://vuldb.com/?submit.769774 · Note