CVE-2026-84854: CWE-787 Out-of-bounds write in wibu-systems-ag wibukey
Description
In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system crash. Under unfavorable circumstances, adjacent kernel memory may be modified.
CVSS v3.1
Score 7.0high
Affected software
wibu-systems-ag
wibukey
pkg:github/wibu-systems-ag/wibukeyRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The WibuKey driver for Windows before version 6.72 contains a CWE-787 out-of-bounds write vulnerability. This occurs due to improper validation of user-controlled input used to determine the size of a kernel buffer, resulting in small amounts of data being written beyond the allocated buffer boundaries. Such memory corruption can cause system instability or crashes and potentially alter adjacent kernel memory, impacting system integrity.
Potential Impact
Successful exploitation can cause system crashes (denial of service) and, in unfavorable cases, modification of adjacent kernel memory, which may compromise system integrity. The CVSS 3.1 score of 7.0 reflects high severity with high impact on confidentiality, integrity, and availability. However, exploitation requires local access with high attack complexity and low privileges.
Mitigation Recommendations
A fixed version 6.72 or later is available that addresses this vulnerability. Users should upgrade the WibuKey driver to version 6.72 or above to remediate the issue. No other mitigation guidance is provided or necessary as the vulnerability is resolved by the official fix.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- wibu
- Date Reserved
- 2026-09-02T13:16:24.763Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6ac4cb132cdf04f6569847c1
Added to database: 10/06/2026, 10:18:59 UTC
Last enriched: 10/06/2026, 10:33:12 UTC
Last updated: 10/06/2026, 18:57:28 UTC
Views: 17
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.