Logo
vulnerabilityCVE-2026-40686
Name
CVE-2026-40686
Source
NVD ( link)Debian ( link)
Description
In Exim before 4.99.2, when utf8 operators are enabled, there is an out-of-bounds read if large UTF-8 trailing characters are present (malformed UTF-8 header data). Information might be divulged within an error message produced during handling of an unrelated e-mail message.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
exim
Exploitable

Vulnerability Ratings#


3.7
CVSSv31
5.3
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
4.99.4
Not Affected
buildroot
master
4.99.4
Not Affected
openwrt
master
4.99.4-r1
Not Affected