A stack-based buffer overflow in desktop.c in Netatalk 1.3 through 4.2.2 allows a remote authenticated attacker to cause a denial of service, obtain… (CVE-2026-44056)

The vulnerability identified as CVE-2026-44056 is a stack-based buffer overflow in the desktop.c file of Netatalk versions 1.3 through 4.2.2. An attacker with remote authenticated access can exploit this flaw to cause denial of service conditions, as well as potentially obtain or modify limited information or data. The CVSS 3.1 vector indicates network attack vector, high attack complexity, low privileges required, no user interaction, unchanged scope, and impacts on confidentiality, integrity, and availability rated as low, low, and high respectively.

Exploitation of this vulnerability can lead to denial of service, limited information disclosure, and limited data modification by a remote authenticated attacker. The impact on availability is high, while confidentiality and integrity impacts are limited but present.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or fix information is provided in the available data. Users should monitor vendor communications for updates and apply any official fixes once available.