VULNERABILITY INTELLIGENCE
CVE-2026-116739
CVSS score5.3 MEDIUM
EPSS probability0.24%
CISA KEVNot currently listed
Published2026-10-26
Last modified2026-10-27
Description
VMime through 0.9.2 contains an information disclosure vulnerability in the uuEncoder::decode function that writes uninitialized stack memory into decoded output for over-long lines. Attackers can send a crafted uuencode or x-uuencode MIME part with a large line length byte to leak up to 15 bytes of…