{"id":"CVE-2026-110661","summary":"CGNS through 4.5.2 Stack Out-of-Bounds Read via ADFI_read_node_header","details":"CGNS through 4.5.2 contains a stack out-of-bounds read vulnerability in ADFI_read_node_header that allows attackers to crash applications by supplying crafted ADF node headers. Attackers can craft .cgns or .adf files whose non-NUL-terminated end tag causes ADFI_stridx_c to scan past disk_node_data, crashing tools like cgnslist.","modified":"2026-10-15T02:47:54.565021215Z","published":"2026-10-14T15:01:26.787Z","database_specific":{"cna_assigner":"VulnCheck","cwe_ids":["CWE-125"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/110xxx/CVE-2026-110661.json"},"references":[{"type":"PACKAGE","url":"https://github.com/CGNS/CGNS"},{"type":"ARTICLE","url":"https://github.com/CGNS/CGNS/blob/3a972d92559787a49c5f9a54974ea1946ecb9d21/src/adf/ADF_internals.c#L6828"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/110xxx/CVE-2026-110661.json"},{"type":"EVIDENCE","url":"https://hackmd.io/@haind-pwn/cgns-adf-node-header-oob-read"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110661"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/cgns-through-4.5.2-stack-out-of-bounds-read-via-adfi-read-node-header"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/cgns/cgns","events":[{"introduced":"0"},{"last_affected":"3a972d92559787a49c5f9a54974ea1946ecb9d21"}],"database_specific":{"source":"AFFECTED_FIELD","extracted_events":[{"introduced":"0"},{"last_affected":"4.5.2"}]}}],"versions":["v4.5.2","v4.5.1","v4.5.0","v4.4.0","v4.3.0","v4.2.0","v4.1.2","v3.4.1","v4.1.1","v4.1.0","v4.0.0","v3.4.0","v3.3.1","v3.3.0","v3.3.0-rc1","v3.3.0-alpha.2","v3.3.0-alpha.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-110661.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}]}