Every CVE Search/ Get API key

CVE-2026-103679

Tnef: use-after-free and double-free in get_body_files() via multi-value body extraction

6.5 Medium

A flaw was found in tnef. A remote attacker could exploit this vulnerability by providing a specially crafted Transport Neutral Encapsulation Format (TNEF) file containing multiple message bodies. During extraction, improper memory management triggers a use-after-free and double-free condition, causing the application to crash and resulting in a Denial of Service (DoS).

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.28%Unchanged since Oct 2, 2026
90%50%10%1%

What each source reports

CVE List Score used 6.5

Tnef: use-after-free and double-free in get_body_files() via multi-value body extraction

A flaw was found in tnef. A remote attacker could exploit this vulnerability by providing a specially crafted Transport Neutral Encapsulation Format (TNEF) file containing multiple message bodies. During extraction, improper memory management triggers a use-after-free and double-free condition, causing the application to crash and resulting in a Denial of Service (DoS).

Record
CVE-2026-103679
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-416
Updated
2026-11-02
EUVDEUVD-2026-90772 6.5

A flaw was found in tnef. A remote attacker could exploit this vulnerability by providing a specially crafted Transport Neutral Encapsulation Format (TNEF) file containing multiple message bodies. During extraction, improper memory management triggers a use-after-free and double-free condition, causing the application to crash and resulting in a Denial of Service (DoS).

Record
EUVD-2026-90772
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-hh3v-7rq2-8fq9 6.5

A flaw was found in tnef. A remote attacker could exploit this vulnerability by providing a...

A flaw was found in tnef. A remote attacker could exploit this vulnerability by providing a specially crafted Transport Neutral Encapsulation Format (TNEF) file containing multiple message bodies. During extraction, improper memory management triggers a use-after-free and double-free condition, causing the application to crash and resulting in a Denial of Service (DoS).

Record
GHSA-hh3v-7rq2-8fq9
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-416
Updated
2026-11-02
NVD 6.5

A flaw was found in tnef. A remote attacker could exploit this vulnerability by providing a specially crafted Transport Neutral Encapsulation Format (TNEF) file containing multiple message bodies. During extraction, improper memory management triggers a use-after-free and double-free condition, causing the application to crash and resulting in a Denial of Service (DoS).

Record
CVE-2026-103679
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-416
Updated
2026-11-02
OSV 6.5

Tnef: use-after-free and double-free in get_body_files() via multi-value body extraction

A flaw was found in tnef. A remote attacker could exploit this vulnerability by providing a specially crafted Transport Neutral Encapsulation Format (TNEF) file containing multiple message bodies. During extraction, improper memory management triggers a use-after-free and double-free condition, causing the application to crash and resulting in a Denial of Service (DoS).

Record
CVE-2026-103679
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-416
Updated
2026-11-02
OSVDEBIAN-CVE-2026-103679 6.5

A flaw was found in tnef. A remote attacker could exploit this vulnerability by providing a specially crafted Transport Neutral Encapsulation Format (TNEF) file containing multiple message bodies. During extraction, improper memory management triggers a use-after-free and double-free condition, causing the application to crash and resulting in a Denial of Service (DoS).

Record
DEBIAN-CVE-2026-103679
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-103679 6.5

A flaw was found in tnef. A remote attacker could exploit this vulnerability by providing a specially crafted Transport Neutral Encapsulation Format (TNEF) file containing multiple message bodies. During extraction, improper memory management triggers a use-after-free and double-free condition, causing the application to crash and resulting in a Denial of Service (DoS).

Record
UBUNTU-CVE-2026-103679
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
tnef
Debian:12
 All versions, plus listed versions
1.4.18-31.4.18-41.4.18-51.4.18-6
 None known
tnef
Debian:13
 All versions, plus listed versions
1.4.18-41.4.18-51.4.18-6
 None known
tnef
Debian:14
 All versions, plus listed versions
1.4.18-41.4.18-51.4.18-6
 None known
tnef
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.4.9-11.4.9-1+deb8u2build0.16.04.11.4.9-1+deb8u3build0.16.04.11.4.9-1+deb8u4build0.16.04.1
 None known
tnef
Ubuntu:18.04:LTS
 All versions, plus listed versions
1.4.12-1.2
 None known
tnef
Ubuntu:20.04:LTS
 All versions, plus listed versions
1.4.12-1.21.4.18-1
 None known
tnef
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.4.18-3
 None known
tnef
Ubuntu:24.04:LTS
 All versions, plus listed versions
1.4.18-3
 None known
tnef
Ubuntu:26.10
 All versions, plus listed versions
1.4.18-5build11.4.18-6
 None known
tnef
Ubuntu:26.04:LTS
 All versions, plus listed versions
1.4.18-51.4.18-5build1
 None known

History

History
RecordedChangedSources
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-103679 is a medium vulnerability (CVSS 6.5) in Tnef Project Tnef, published October 1, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.28%, the 20th percentile. No source names a fixed version.

References

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open