{"id":"CVE-2026-19477","aliases":["EUVD-2026-82395","GHSA-9jr3-33mw-g6jc","GHSA-j395-f5mc-4872"],"status":"published","title":"Stack-based Buffer Overflow Vulnerability in Linux (uldaq)","description":"There\nis stack-based buffer overflow vulnerability recently discovered in MCC Universal Library for Linux (uldaq).  This may result in information disclosure or arbitrary code\nexecution. This vulnerability affects MCC Universal Library for Linux (uldaq) v1.2.1\nand prior versions.","severity":{"version":"4.0","score":8.6,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00203,"percentile":0.10411,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-121"],"published":"2026-09-17T18:42:17Z","modified":"2026-10-20T11:19:01Z","products":[{"vendor":"mcc","product":"universal library for linux (uldaq)"}],"references":[{"url":"https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/stack-based-buffer-overflow-vulnerability-linux-uldaq.html","tags":["web"]},{"url":"https://github.com/mccdaq/uldaq/security/advisories/GHSA-9jr3-33mw-g6jc","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19477"},{"url":"https://github.com/advisories/GHSA-j395-f5mc-4872"}],"sources":{"cve":[{"id":"CVE-2026-19477","title":"Stack-based Buffer Overflow Vulnerability in Linux (uldaq)","description":"There\nis stack-based buffer overflow vulnerability recently discovered in MCC Universal Library for Linux (uldaq).  This may result in information disclosure or arbitrary code\nexecution. This vulnerability affects MCC Universal Library for Linux (uldaq) v1.2.1\nand prior versions.","status":"published","published":"2026-09-17T18:42:17.19Z","modified":"2026-09-28T15:49:05.252Z","cvss":[{"version":"4.0","score":8.6,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T13:47:28.691429Z"}],"euvd":[{"id":"EUVD-2026-82395","description":"There\nis stack-based buffer overflow vulnerability recently discovered in MCC Universal Library for Linux (uldaq).  This may result in information disclosure or arbitrary code\nexecution. This vulnerability affects MCC Universal Library for Linux (uldaq) v1.2.1\nand prior versions.","status":"published","published":"2026-09-17T18:42:17Z","modified":"2026-09-28T15:49:05Z","cvss":[{"version":"4.0","score":8.6,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T17:27:53.425914Z"}],"ghsa":[{"id":"GHSA-j395-f5mc-4872","title":"There\nis stack-based buffer overflow vulnerability recently discovered in MCC Universal Library...","description":"There\nis stack-based buffer overflow vulnerability recently discovered in MCC Universal Library for Linux (uldaq).  This may result in information disclosure or arbitrary code\nexecution. This vulnerability affects MCC Universal Library for Linux (uldaq) v1.2.1\nand prior versions.","status":"published","published":"2026-09-17T21:31:41Z","modified":"2026-09-28T18:32:14Z","cvss":[{"version":"4.0","score":8.6,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T15:12:32.639211Z"}],"nvd":[{"id":"CVE-2026-19477","description":"There\nis stack-based buffer overflow vulnerability recently discovered in MCC Universal Library for Linux (uldaq).  This may result in information disclosure or arbitrary code\nexecution. This vulnerability affects MCC Universal Library for Linux (uldaq) v1.2.1\nand prior versions.","status":"published","published":"2026-09-17T19:16:41.43Z","modified":"2026-09-28T16:17:13.847Z","cvss":[{"version":"4.0","score":8.6,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:12:49.70655Z"}],"osv":[{"id":"CVE-2026-19477","description":"There\nis stack-based buffer overflow vulnerability recently discovered in MCC Universal Library for Linux (uldaq).  This may result in information disclosure or arbitrary code\nexecution. This vulnerability affects MCC Universal Library for Linux (uldaq) v1.2.1\nand prior versions.","status":"published","published":"2026-09-17T19:16:41.43Z","modified":"2026-10-20T11:19:01.890529426Z","cvss":[{"version":"4.0","score":8.6,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"updated_at":"2026-11-02T15:44:58.024074Z"}]}}