{"id":"CVE-2026-112063","summary":"libstrophe through 0.14.0 Stack-Based Buffer Overflow via SCRAM Salt in SCRAM_Hi","details":"libstrophe through 0.14.0 contains a stack-based buffer overflow vulnerability in SCRAM_Hi that allows malicious XMPP servers to overflow a 128-byte stack buffer by sending an oversized SCRAM salt. Attackers can send a server-first-message whose s= attribute decodes to more than 124 bytes, aborting the client or overwriting stack memory in NDEBUG builds.","modified":"2026-10-19T02:45:47.603642259Z","published":"2026-10-18T12:19:52.787Z","database_specific":{"cwe_ids":["CWE-121"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/112xxx/CVE-2026-112063.json","cna_assigner":"VulnCheck"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/112xxx/CVE-2026-112063.json"},{"type":"PACKAGE","url":"https://github.com/strophe/libstrophe"},{"type":"ARTICLE","url":"https://github.com/strophe/libstrophe/blob/0.14.0/src/sasl.c"},{"type":"ARTICLE","url":"https://github.com/strophe/libstrophe/blob/0.14.0/src/scram.c"},{"type":"ADVISORY","url":"https://hackmd.io/@haindpwn/libstrophe-scram-salt-stack-overflow"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112063"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/libstrophe-through-0.14.0-stack-based-buffer-overflow-via-scram-salt-in-scram-hi"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/strophe/libstrophe","events":[{"introduced":"0"},{"last_affected":"7c2e78937d1f8614339bfa88bdcc21bb406deadd"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"last_affected":"0.14.0"}],"source":"AFFECTED_FIELD"}}],"versions":["0.14.0","0.13.1","0.13.0","0.12.3","0.12.2","0.12.1","0.12.0","0.11.0","0.10.1","0.10.0","0.9.3","0.9.2","0.9.1","0.9.0","0.8.8","0.8.7","0.8.6","0.8.5"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-112063.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N"}]}