CVE-2026-44048

Summary

A stack-based buffer overflow via UCS-2 type confusion in convert_charset() in Netatalk 2.0.4 through 4.4.2 allows a remote authenticated attacker to execute arbitrary code or cause a denial of service.

Affected Software

VendorProductVersion RangeStatus
NetatalkNetatalk2.0.4 <= 4.4.2affected
NetatalkNetatalk4.4.3unaffected

Weaknesses

  • CWE-121: Stack-based Buffer Overflow

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References