CVE-2026-121506

The record

An out-of-bounds read and write in NTS client extension field parsing (extens_client_recv) in NTPsec before 1.2.5 allows a remote attacker who can send NTP server-mode replies to an NTS client to corrupt heap memory and crash ntpd, and, combined with the NTS-KE client out-of-bounds read fixed in 1.2.4, to bypass NTS authentication and set the client's time, via an NTS Authenticator and Encrypted Extension Fields field whose nonce length exceeds the field.

Affected packages

Related vulnerabilities

• CVE-2026-120931 Out of bounds write in WebGL in Google Chrome on on Android prior to 156.0.8078.47… CWE-787
• CVE-2026-61495 TinyUSB through 0.21.0, fixed in commit e85c2b8, contains an out-of-bounds write… CWE-787
• CVE-2026-121037 Out of bounds write in ANGLE in Google Chrome on on Windows prior to 157.0.8103.38… CWE-787
• CVE-2026-120952 An out-of-bounds write in the MongoDB Atlas SQL ODBC Driver may be triggered when a value… CWE-787
• CVE-2026-120959 A memory-handling flaw in the MongoDB Atlas SQL ODBC Driver can cause values returned for… CWE-787
• CVE-2026-63418 Monitoring Plugins is a suite of plugins for monitoring applications. CWE-787
• CVE-2026-40661 An out-of-bounds write (OOW) condition in the AMD Compressonator SDK could allow an… CWE-787
• CVE-2026-121513 Off-by-one Heap Overflow in µD3TN v0.15.1 SPP Parser allows Unauthenticated Remote… CWE-787