{"id":"CVE-2026-14316","published":"2026-10-01T17:17:21.440","lastModified":"2026-10-01T20:34:26.287","description":"The revoked-key error path builds a human-readable failure reason using sprintf() into a heap buffer. The allocated buffer is too small for the final formatted message. When sprintf() writes the full message, it can write past the end of the heap allocation.","cvssScore":8.1,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","cwes":["CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://www.fortra.com/security/advisories/product-security/fi-2026-019","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The flaw involves an integer overflow in the sprintf() function, leading to potential buffer overflow. This can allow attackers to inject malicious code or cause a denial of service.","exploitability":"Exploitation is moderately difficult as it requires precise control over the input to trigger the buffer overflow. The attacker must have network access and knowledge of the specific failure path.","blast_radius":"If exploited, the impact could be significant, potentially leading to remote code execution or service disruption.","remediation":"Upgrade to the fixed version 2.590 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["buffer-overflow","heap-overflow","security-bug"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-05T08:44:05.478Z"}}