CVE-2006-5646

The record

Heap-based buffer overflow in Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when archive scanning is enabled, allows remote attackers to trigger a denial of service (memory corruption) via a CHM file with an LZX decompression header that specifies a Window_size of 0.

Affected packages

Related vulnerabilities

• CVE-2026-13573 A vulnerability was found in llvm llvm-project up to 22.1.6. CWE-119
• CVE-2026-13574 A vulnerability was determined in llvm llvm-project up to 22.1.6. CWE-119
• CVE-2026-12806 A vulnerability has been found in Edimax BR-6478AC V2 1.23. CWE-119
• CVE-2026-12805 A flaw has been found in OFFIS DCMTK up to 3.7.0. CWE-119
• CVE-2026-42488 Some shadow paging errors paths will switch the page-tables without updating the… CWE-119
• CVE-2026-12327 Memory safety bugs present in Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and… CWE-119
• CVE-2026-12330 Incorrect boundary conditions in the Internationalization component. CWE-119
• CVE-2026-12326 Memory safety bugs present in Firefox 151 and Thunderbird 151. CWE-119