CVE-2026-107820: CWE-190: Integer Overflow or Wraparound in duty1g x64dbg-mcp-server
Description
CVE-2026-107820 is an integer overflow vulnerability in the x64dbg-MCP Server plugin for x64dbg, affecting versions prior to 1.2. The vulnerability arises from parsing an unbounded Content-Length header without proper bounds checking, allowing an unauthenticated network client to trigger a runtime integer-overflow panic. This causes the x64dbg process to terminate, resulting in a denial of service. The issue is fixed in version 1.2.
CVSS v3.1
Score 5.3medium
Affected software
duty1g
x64dbg-mcp-server
pkg:github/duty1g/x64dbg-mcp-serverRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The x64dbg-MCP Server plugin for x64dbg, prior to version 1.2, improperly handles the Content-Length HTTP header by parsing an unbounded value and performing unchecked addition on it. An unauthenticated attacker can supply a near-maximum Content-Length value, causing an integer overflow in the server's code before token authentication. This overflow leads to a runtime panic that terminates the entire x64dbg process and its active debugging session. The overflowed value is only used in a comparison, so the vulnerability does not lead to memory corruption or code execution. The server listens on all interfaces (0.0.0.0) by default, increasing exposure. The vulnerability is addressed in version 1.2.
Potential Impact
An unauthenticated remote attacker can cause a denial of service by triggering a runtime panic that terminates the x64dbg process and interrupts any active debugging sessions. There is no impact on confidentiality or integrity, and no code execution or memory corruption is possible due to this vulnerability.
Mitigation Recommendations
Upgrade to x64dbg-MCP Server version 1.2 or later, where this integer overflow vulnerability is fixed. Until then, consider restricting network access to the server to trusted clients only, as it listens on all interfaces by default. Patch status is confirmed fixed in version 1.2.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-10-08T21:23:59.823Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6ac92c962cdf04f656752969
Added to database: 10/09/2026, 18:04:06 UTC
Last enriched: 10/09/2026, 18:18:43 UTC
Last updated: 10/09/2026, 18:57:31 UTC
Views: 7
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.