Sahlberg vulnerabilities
We track 4 vulnerabilities in Sahlberg products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 22, 2026.
Latest Sahlberg vulnerabilities
- 7.6 High severity
libsmb2: Integer Overflow or Wraparound
libsmb2 before 6.3 contains integer overflow vulnerabilities in the DCE/RPC NDR decoder in lib/dcerpc.c that allow heap out-of-bounds reads and writes. A malicious SMB server or machine-in-the-middle on unsigned connections can send crafted NetrShareEnum repli
- 7.1 High severity
libnfs: Out-of-bounds Write
ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-bounds write related to lib/libnfs-zdr.c with libnfs_zdr_bytes(), libnfs_zdr_string(), and libnfs_zdr_array(). The caller-supplied maxsize value is not honored.
- 7.1 High severity
libnfs: Integer Underflow (Wrap or Wraparound)
libnfs through 6.0.2 before 935b8db has an xid integer underflow in READ_IOVEC in rpc_read_from_socket in lib/socket.c during a connection to a crafted NFS server, when the expected pdu size exceeds the absolute pdu size from the xid/record-marker.
- 7.1 High severity
libnfs: Improper Validation of Specified Quantity in Input
libnfs through 6.0.2 before 55c18ea does not validate a string size, leading to an integer overflow during a connection to a crafted NFS server. This occurs in libnfs_zdr_string in lib/libnfs-zdr.c.