CVE-2026-84269: Heap-based Buffer Overflow in GNOME gvfs
Description
A flaw was found in the AFP backend in gvfs. When mounting a share, a malicious AFP server can cause the DSI read path to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the pre-sized reply buffer, causing the operation to access past the intended boundaries. This issue allows a malicious server to overflow a heap buffer and crash the gvfsd-afp process, resulting in a denial of service.
CVSS v3.1
Score 6.5medium
Affected software
GNOME
gvfs
Red Hat
Red Hat Enterprise Linux 10
Red Hat
Red Hat Enterprise Linux 6
Red Hat
Red Hat Enterprise Linux 7
Red Hat
Red Hat Enterprise Linux 8
Red Hat
Red Hat Enterprise Linux 9
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability exists in the DSI read path of the AFP backend in GNOME gvfs. When mounting an AFP share, the server can provide a length value larger than the pre-sized reply buffer, which is not verified by the client. This leads to a heap-based buffer overflow and crashes the gvfsd-afp process, causing denial of service. Exploitation requires user interaction to connect to a malicious AFP share. No integrity or confidentiality impact is reported, only availability is affected.
Potential Impact
The direct impact is a denial of service caused by a heap-based buffer overflow crashing the gvfsd-afp process. There is no reported impact on confidentiality or integrity. The vulnerability requires user interaction to connect to a malicious AFP share, limiting the attack surface. No known exploits are reported in the wild.
Mitigation Recommendations
The vendor advisory recommends not connecting to untrusted AFP servers to mitigate this vulnerability. No official patch or fix is currently confirmed. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- redhat
- Date Reserved
- 2026-09-01T14:05:54.145Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/security/cve/CVE-2026-84269","vendor":"Red Hat"}]
Threat ID: 6a96f4d9acd9273b49e76285
Added to database: 09/01/2026, 15:52:57 UTC
Last enriched: 09/07/2026, 12:35:04 UTC
Last updated: 10/15/2026, 06:48:19 UTC
Views: 84
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.