Live › vulnerability › CVE-2026-115505
Go to dashboardlibsmb2 before 6.3 has integer overflows in its DCE/RPC NDR decoder that cause out-of-bounds heap reads and writes. A malicious SMB server or man-in-the-middle on unsigned connections can send crafted NetrShareEnum replies that corrupt client heap memory.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Applications that link libsmb2 and call smb2_share_enum_async() to list shares on remote SMB servers are exposed, especially when they connect to servers that are not fully trusted or over networks an attacker can sit on. Systems that never enumerate shares or only talk to trusted, signed SMB servers are less exposed.
No product ranges from the sources yet.
dpkg -l | grep libsmb2 or pkg-config --modversion libsmb2smb2_share_enum_async()6.3 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
libsmb2 before 6.3 contains integer overflow vulnerabilities in the DCE/RPC NDR decoder in lib/dcerpc.c that allow heap out-of-bounds reads and writes. A malicious SMB server or machine-in-the-middle on unsigned connections can send crafted NetrShareEnum replies with wrapping actual_count or max_count values when clients call smb2_share_enum_async(), corrupting heap memory.
This page as .md · .json · in your agent: get_signal("CVE-2026-115505")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.