This vulnerability (CVE-2026-46433) involves a heap out-of-bounds read (CWE-125) in the VLAN decapsulation memmove operation within lldpd, specifically version 3.0. The issue could cause the software to read memory beyond the allocated heap buffer, potentially leading to information disclosure or application instability. The advisory is published by the Microsoft Security Response Center but does not include a CVSS score or detailed technical exploitation information. There is no indication of active exploitation or available patches.

The vulnerability could allow an attacker to cause a heap out-of-bounds read, which may result in information disclosure or application crashes. However, no confirmed exploits or impact details are provided. The lack of a CVSS score and known exploits suggests limited public information on the severity or exploitation feasibility.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround information is provided in the available data. Users should monitor the Microsoft Security Response Center for updates and apply any future patches promptly.