CVE-2026-19508 - Heap-based buffer overflow in the multipart form-data parser in `jst_post.c` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows a remote unauthenticated attacker to cause memory corruption and denial of service, and potentially execute arbitrary code, via a crafted multipart/form-data request. - 漏洞详情

漏洞编号：CVE-2026-19508

风险等级：危急

漏洞来源：CVE

CVE 编号：CVE-2026-19508

CNNVD 编号：-

厂商/产品：- / -

影响范围：-

CWE：CWE-119

发布/更新时间：2026-08-19 / 2026-08-27

漏洞描述

Heap-based buffer overflow in the multipart form-data parser in `jst_post.c` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows a remote unauthenticated attacker to cause memory corruption and denial of service, and potentially execute arbitrary code, via a crafted multipart/form-data request.

漏洞描述

相关链接

相关漏洞