CVE-2026-88835 — CVSS 6.1 MEDIUM

BusyBox dpkg read_package_field() steps past a NUL terminator on malformed .deb packages, causing an out-of-bounds heap read.

Loading application…