FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

popt -- Incorrect Calculation of Buffer Size

Affected packages
popt <= 1.19_2,1

Details

VuXML ID e86be66a-b715-11f1-a70f-00a0980083d7
Discovery 2026-09-01
Entry 2026-09-23

https://access.redhat.com/errata/RHSA-2026:56984 reports:

A flaw was found in popt. This vulnerability allows an attacker to provide specially crafted configuration content to a host, which, when loaded, can lead to a small memory corruption issue. This occurs because of an error in how the `poptConfigFileToString` function reallocates memory for buffers. Successful exploitation could result in heap metadata corruption, potentially causing the affected process to become unavailable (denial of service).

References

CVE Name CVE-2026-18743
URL https://cveawg.mitre.org/api/cve/CVE-2026-18743