vmime vulnerabilities

1 known vulnerability in vmime from Kisli. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  vmime: Stack-based Buffer Overflow

  CVE-2026-116738Oct 26, 2026Kisli

  VMime through 0.9.2 contains an integer underflow in the uuEncoder::decode function that allows remote attackers to trigger a stack-based buffer overflow via crafted uuencoded MIME parts. Attackers can send an email with a uuencoded line whose length character