PT-2026-44089 · Pam Usb · Pam Usb

Mcdope · Published 2026-05-27 · Updated 2026-05-27 · CVE-2026-48065

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions pam usb versions prior to 0.9.1

Description In the src/conf.c file, heap memory is allocated proportional to n devices, a count derived from libxml2 XPath evaluation of the configuration file, without enforcing an upper bound. On 32-bit targets such as armv7l and i686, the multiplication of n devices by sizeof(t pusb device) can wrap around size t, resulting in xmalloc() receiving a very small size. Since xmalloc() only triggers an abort on a NULL return, a small-but-non-NULL allocation is accepted, leading to a heap-based buffer overflow during subsequent array writes.

Recommendations Update to version 0.9.1.

Fix

Integer Overflow

Heap Based Buffer Overflow

Weakness Enumeration

CWE-190

CWE-122

Related Identifiers

CVE-2026-48065

Affected Products

Pam Usb

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-48065 · Security Note
• https://github.com/mcdope/pam_usb/issues/55 · Note
• https://github.com/mcdope/pam_usb/issues/352 · Note
• https://github.com/mcdope/pam_usb/security/advisories/GHSA-24mw-m2vf-36vp · Note
• https://t.me/CVEtracker/55166 · Telegram Post