Threats Tagged 'ghsa-fr4j-cp66-9wc4'

CVE-2026-88839 is an out-of-bounds write vulnerability in the BusyBox passwd/group tokenize() function within Red Hat Hardened Images. It occurs due to referencing a stale endpoint pointer after trimming, leading to an out-of-bounds write of heap pointers. This vulnerability has a CVSS score of 6.7, indicating a medium severity with high impact on confidentiality, integrity, and availability. Red Hat has released an update to BusyBox packages that addresses this issue.