CVE-2026-70456: CWE-787 Out-of-bounds Write in RsyncProject rsync
rsync 3.0.1 before 3.5.0 contains an out-of-bounds write vulnerability in the read_args() function that allows a malicious sender to corrupt adjacent heap memory by sending a crafted argument list. When the argument count causes the argv allocation to be exactly full, the trailing NULL terminator is written one slot beyond the allocation boundary, corrupting adjacent heap memory.
AI Analysis
Technical Summary
CVE-2026-70456 is an out-of-bounds write vulnerability in RsyncProject's rsync software affecting versions 3.0.1 up to and including 3.4.4. The issue arises in the read_args() function when the argument count causes the argv allocation to be exactly full, resulting in the trailing NULL terminator being written one slot beyond the allocated boundary. This heap memory corruption could be triggered by a malicious sender sending a crafted argument list. The vulnerability has a CVSS 4.0 base score of 8.8, indicating high severity, with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on availability.
Potential Impact
Successful exploitation allows a remote attacker to corrupt adjacent heap memory in the rsync process by sending a specially crafted argument list. This memory corruption could lead to unpredictable behavior including crashes or potentially code execution, impacting the availability and integrity of the rsync service.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround is currently documented. Users should monitor the RsyncProject advisories for updates and apply patches once available.
CVE-2026-70456: CWE-787 Out-of-bounds Write in RsyncProject rsync
Description
rsync 3.0.1 before 3.5.0 contains an out-of-bounds write vulnerability in the read_args() function that allows a malicious sender to corrupt adjacent heap memory by sending a crafted argument list. When the argument count causes the argv allocation to be exactly full, the trailing NULL terminator is written one slot beyond the allocation boundary, corrupting adjacent heap memory.
CVSS v4.0
Score 8.8high
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-70456 is an out-of-bounds write vulnerability in RsyncProject's rsync software affecting versions 3.0.1 up to and including 3.4.4. The issue arises in the read_args() function when the argument count causes the argv allocation to be exactly full, resulting in the trailing NULL terminator being written one slot beyond the allocated boundary. This heap memory corruption could be triggered by a malicious sender sending a crafted argument list. The vulnerability has a CVSS 4.0 base score of 8.8, indicating high severity, with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on availability.
Potential Impact
Successful exploitation allows a remote attacker to corrupt adjacent heap memory in the rsync process by sending a specially crafted argument list. This memory corruption could lead to unpredictable behavior including crashes or potentially code execution, impacting the availability and integrity of the rsync service.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround is currently documented. Users should monitor the RsyncProject advisories for updates and apply patches once available.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-08-04T14:52:23.814Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a7ddecabf8831d5395d0061
Added to database: 08/13/2026, 15:12:10 UTC
Last enriched: 08/13/2026, 15:29:21 UTC
Last updated: 08/13/2026, 17:43:31 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.