Threats Tagged 'cve-2026-49494'

CVE-2026-49494 is a high-severity integer underflow vulnerability in the IPv6 packet parser of Comodo Internet Security's firewall driver Inspect. sys. The vulnerability arises because the parser decrements an unsigned 64-bit payload-length field by the size of IPv6 extension headers without validation, allowing an attacker to cause an underflow. This leads to out-of-bounds memory reads and an oversized memcpy operation in the Windows kernel at DISPATCH_LEVEL, resulting in a system crash (BSOD). The flaw can be triggered remotely by an unauthenticated attacker sending a specially crafted IPv6 packet, even if all ports are blocked by the firewall. No patch or official remediation guidance is currently available from the vendor. No known exploits in the wild have been reported.