Loading market data...
← Back to CVE feed

CVE-2026-103679

MEDIUM CVSS 6.5 View on NVD ↗

Description

A flaw was found in tnef. A remote attacker could exploit this vulnerability by providing a specially crafted Transport Neutral Encapsulation Format (TNEF) file containing multiple message bodies. During extraction, improper memory management triggers a use-after-free and double-free condition, causing the application to crash and resulting in a Denial of Service (DoS).

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Published: Oct 01, 2026 12:17 UTC Modified: Oct 01, 2026 15:17 UTC