Every CVE Search/ Get API key

CVE-2026-120457

libaec through 1.1.7 Out-of-Bounds Read via m_se_decode() Second Extension Decoder

5.8 MediumFix available

libaec through 1.1.7 contains an out-of-bounds read vulnerability in m_se_decode() in src/decode.c that allows attackers to bypass a signed bounds check via an overlong fundamental sequence. Attackers can supply a crafted CCSDS 121.0/SZIP stream with 2^31 or more zero bits to crash the decoder or leak adjacent memory into decoded samples.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Passive

What an attacker can affect

Confidentiality
Low
Integrity
None
Availability
High

Exploit likelihood

0.24%Unchanged since Nov 3, 2026
90%50%10%1%

What each source reports

CVE List Score used 5.8

libaec through 1.1.7 Out-of-Bounds Read via m_se_decode() Second Extension Decoder

libaec through 1.1.7 contains an out-of-bounds read vulnerability in m_se_decode() in src/decode.c that allows attackers to bypass a signed bounds check via an overlong fundamental sequence. Attackers can supply a crafted CCSDS 121.0/SZIP stream with 2^31 or more zero bits to crash the decoder or leak adjacent memory into decoded samples.

Record
CVE-2026-120457
CVSS 4.0
5.8 MediumCVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H
Weakness
CWE-196
Updated
2026-11-02
EUVDEUVD-2026-115217 5.8

libaec through 1.1.7 contains an out-of-bounds read vulnerability in m_se_decode() in src/decode.c that allows attackers to bypass a signed bounds check via an overlong fundamental sequence. Attackers can supply a crafted CCSDS 121.0/SZIP stream with 2^31 or more zero bits to crash the decoder or leak adjacent memory into decoded samples.

Record
EUVD-2026-115217
CVSS 4.0
5.8 MediumCVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
Updated
2026-11-03
GitHub AdvisoriesGHSA-6vjr-59w2-48mg 5.8

libaec through 1.1.7 contains an out-of-bounds read vulnerability in m_se_decode() in src/decode...

libaec through 1.1.7 contains an out-of-bounds read vulnerability in m_se_decode() in src/decode.c that allows attackers to bypass a signed bounds check via an overlong fundamental sequence. Attackers can supply a crafted CCSDS 121.0/SZIP stream with 2^31 or more zero bits to crash the decoder or leak adjacent memory into decoded samples.

Record
GHSA-6vjr-59w2-48mg
CVSS 4.0
5.8 MediumCVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H
Weakness
CWE-196
Updated
2026-11-02
NVD 5.8

libaec through 1.1.7 contains an out-of-bounds read vulnerability in m_se_decode() in src/decode.c that allows attackers to bypass a signed bounds check via an overlong fundamental sequence. Attackers can supply a crafted CCSDS 121.0/SZIP stream with 2^31 or more zero bits to crash the decoder or leak adjacent memory into decoded samples.

Record
CVE-2026-120457
CVSS 4.0
5.8 MediumCVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H
Weakness
CWE-196
Updated
2026-11-03
OSV 5.8

libaec through 1.1.7 Out-of-Bounds Read via m_se_decode() Second Extension Decoder

libaec through 1.1.7 contains an out-of-bounds read vulnerability in m_se_decode() in src/decode.c that allows attackers to bypass a signed bounds check via an overlong fundamental sequence. Attackers can supply a crafted CCSDS 121.0/SZIP stream with 2^31 or more zero bits to crash the decoder or leak adjacent memory into decoded samples.

Record
CVE-2026-120457
CVSS 4.0
5.8 MediumCVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
Weakness
CWE-196
Updated
2026-11-07
OSVDEBIAN-CVE-2026-120457 5.8

libaec through 1.1.7 contains an out-of-bounds read vulnerability in m_se_decode() in src/decode.c that allows attackers to bypass a signed bounds check via an overlong fundamental sequence. Attackers can supply a crafted CCSDS 121.0/SZIP stream with 2^31 or more zero bits to crash the decoder or leak adjacent memory into decoded samples.

Record
DEBIAN-CVE-2026-120457
CVSS 4.0
5.8 MediumCVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-04
OSVUBUNTU-CVE-2026-120457 5.8

libaec through 1.1.7 contains an out-of-bounds read vulnerability in m_se_decode() in src/decode.c that allows attackers to bypass a signed bounds check via an overlong fundamental sequence. Attackers can supply a crafted CCSDS 121.0/SZIP stream with 2^31 or more zero bits to crash the decoder or leak adjacent memory into decoded samples.

Record
UBUNTU-CVE-2026-120457
CVSS 4.0
5.8 MediumCVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H
Updated
2026-11-05
OSVAZL-112580 No score

CVE-2026-120457 affecting package libaec 1.1.3-1

libaec through 1.1.7 contains an out-of-bounds read vulnerability in m_se_decode() in src/decode.c that allows attackers to bypass a signed bounds check via an overlong fundamental sequence. Attackers can supply a crafted CCSDS 121.0/SZIP stream with 2^31 or more zero bits to crash the decoder or leak adjacent memory into decoded samples.

Record
AZL-112580
Updated
2026-11-05
OSVopenSUSE-SU-2026:12461-1 No score

libaec-devel-1.1.8-1.1 on GA media

These are all security issues fixed in the libaec-devel-1.1.8-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:12461-1
Updated
2026-11-07

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libaec
Azure Linux:3
 through 1.1.3-1 None known
libaec
Debian:12
 All versions, plus listed versions
1.0.6-11.1.1-11.1.2-11.1.3-11.1.4-1
Show 4 moreShow less
1.1.4-21.1.5-11.1.6-11.1.7-1
 None known
libaec
Debian:13
 All versions, plus listed versions
1.1.3-11.1.4-11.1.4-21.1.5-11.1.6-11.1.7-1
 None known
libaec
Debian:14
 All versions, plus listed versions
1.1.3-11.1.4-11.1.4-21.1.5-11.1.6-11.1.7-1
 None known
libaec
Ubuntu:16.04:LTS
 All versions, plus listed versions
0.3.2-1
 None known
libaec
Ubuntu:18.04:LTS
 All versions, plus listed versions
0.3.2-2
 None known
libaec
Ubuntu:20.04:LTS
 All versions, plus listed versions
1.0.4-1
 None known
libaec
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.0.4-31.0.6-1
 None known
libaec
Ubuntu:24.04:LTS
 All versions, plus listed versions
1.0.6-11.1.2-11.1.2-1build1
 None known
libaec
Ubuntu:26.10
 All versions, plus listed versions
1.1.5-11.1.7-1
 None known
libaec
Ubuntu:26.04:LTS
 All versions, plus listed versions
1.1.3-11.1.4-21.1.5-1
 None known
libaec
openSUSE:Tumbleweed
 before 1.1.8-1.1
1.1.8-1.1

History

History
RecordedChangedSources
affected, aliases, facts, referencesOSV
affected, aliases, referencesOSV
affected, aliases, facts, referencesOSV
affected, aliases, referencesEUVD, OSV
referencesNVD, OSV
first indexedCVE List, EUVD, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-120457 is a medium vulnerability (CVSS 5.8) in Deutsches Klimarechenzentrum Libaec, published November 2, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 15th percentile. Fixed in libaec 1.1.8-1.1.

References

Show 8 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open