An unbounded memory reallocation in the charset conversion code in Netatalk 2.0.0 through 4.4.2 allows a remote authenticated attacker to cause a… (CVE-2026-44070)

An unbounded memory reallocation vulnerability exists in the charset conversion component of Netatalk versions 2.0.0 through 4.4.2. This vulnerability can be triggered remotely by an authenticated attacker who crafts specific character conversion requests, leading to a minor denial of service condition. The flaw does not impact confidentiality or integrity, only availability. The affected versions include multiple Ubuntu package releases of Netatalk 2.2.x. There is no indication of known exploits in the wild or a vendor-provided patch status in the provided data.

The vulnerability allows a remote authenticated attacker to cause a minor denial of service by exploiting unbounded memory reallocation in charset conversion. There is no impact on confidentiality or integrity. The denial of service is considered minor, consistent with the CVSS score of 3.1.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No vendor advisory or patch information is provided in the input data. Until a fix is available, limit access to trusted users and monitor for unusual activity related to charset conversion requests.