Live › vulnerability › CVE-2026-58977
The is_valid_header function in timed_cache_item.c lacks a bounds check, allowing an out-of-bounds write. A local app with System-level execution could use it to escalate privileges.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-02 21:35 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Unknown from the sources.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In is_valid_header of timed_cache_item.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
This page as .md · .json · in your agent: get_signal("CVE-2026-58977")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.