CVE-2026-81575
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Missing Sanity Checks for Buffer Lengths
If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 accepts requests with opcode 0x5e, which contain the data length and the data itself. Missing bounds checking on the data length value can lead to out of bounds reads, causing a segmentation fault that ultimately crashes the CodeMeter Runtime.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
codemeter-runtime
- Vendor
- wibu-systems-ag
- Product
- codemeter-runtime
- Platforms
- Unknown
- Default status
unaffected- Package collection
- https://www.wibu.com/products/codemeter/runtime.html
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 9.00 | affected | custom | 9.10 | Unavailable | None listed |
| 8.00 | affected | custom | 8.41a | Unavailable | None listed |
| 7.00 | unaffected | Unavailable | Unavailable | Unavailable | None listed |
| 6.00 | unaffected | Unavailable | Unavailable | Unavailable | None listed |