CVE-2026-20052

The record

A vulnerability in the memory management handling for the Snort 3 Detection Engine of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart. This vulnerability is due to a logic error in memory management when a device is performing Snort 3 SSL packet inspection. An attacker could exploit this vulnerability by sending crafted SSL packets through an established connection to be parsed by the Snort 3 Detection Engine. A successful exploit could allow the attacker to cause a denial of service (DoS) condition when the Snort 3 Detection Engine unexpectedly restarts.

Affected packages

Related vulnerabilities

• CVE-2023-20585 Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with… CWE-788
• CVE-2026-21316 Audition versions 25.3 and earlier are affected by an Access of Memory Location After End… CWE-788
• CVE-2026-25584 iccDEV provides a set of libraries and tools that allow for the interaction… CWE-788
• CVE-2024-5700 Memory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. CWE-788
• CVE-2024-0074 NVIDIA GPU Display Driver for Linux contains a vulnerability where an attacker may access… CWE-788
• CVE-2024-0229 An out-of-bounds memory access flaw was found in the X.Org server. CWE-788