CVE-2026-103679

Published: Oct 1, 2026Modified: Oct 5, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: patrick@puiterwijk.org (Secondary)

Description

A flaw was found in tnef. A remote attacker could exploit this vulnerability by providing a specially crafted Transport Neutral Encapsulation Format (TNEF) file containing multiple message bodies. During extraction, improper memory management triggers a use-after-free and double-free condition, causing the application to crash and resulting in a Denial of Service (DoS).

Affected (1)

Products: Tnef Project: Tnef

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Tnef Project Tnef	version ≤ 1.4.18

Related CWEs

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (3)

https://access.redhat.com/security/cve/CVE-2026-103679

Source: patrick@puiterwijk.org

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2544477

Source: patrick@puiterwijk.org

Issue TrackingThird Party Advisory

https://github.com/verdammelt/tnef

Source: patrick@puiterwijk.org

Product

Timeline

No history available yet.