Threats tagged 'ghsa-3rvc-qcwh-fhqv'

CVE-2025-10158 is a medium severity vulnerability in rsync where a malicious client acting as the receiver can trigger an out-of-bounds read of a heap-based buffer via a negative array index. Exploitation requires the attacker to have at least read access to the remote rsync module. The vulnerability does not impact confidentiality or availability but can lead to information disclosure or integrity issues.