CVE-2010-2891
NoneCVSS
—
EPSS
14.0%
Published
Oct 28, 2010
CISA due date
—
The record
Buffer overflow in the smiGetNode function in lib/smi.c in libsmi 0.4.8 allows context-dependent attackers to execute arbitrary code via an Object Identifier (aka OID) represented as a numerical string containing many components separated by . (dot) characters.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | libsmi | 0 | 0.4.8+dfsg2-3 |
| Debian:12 | libsmi | 0 | 0.4.8+dfsg2-3 |
| Debian:13 | libsmi | 0 | 0.4.8+dfsg2-3 |
| Debian:5.0 | libsmi | 0 | 0.4.7+dfsg-0.2 |
| openSUSE:Tumbleweed | libsmi | 0 | 0.4.8-24.8 |
Related vulnerabilities
- CVE-2026-76030 Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote… CWE-119
- CVE-2026-76026 Memory corruption in Autofill in Google Chrome prior to 156.0.8078.79 allowed a remote… CWE-119
- CVE-2026-76027 Memory corruption in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a… CWE-119
- CVE-2026-76029 Memory corruption in Network in Google Chrome prior to 156.0.8078.79 allowed a remote… CWE-119
- CVE-2026-76024 Memory corruption in MediaStream in Google Chrome prior to 156.0.8078.79 allowed a remote… CWE-119
- CVE-2026-119264 Memory corruption in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote… CWE-119
- CVE-2026-119265 Memory corruption in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote… CWE-119
- CVE-2026-119263 Memory corruption in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a… CWE-119