Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-16095

Shibby Tomato rc setup_conntrack out-of-bounds write

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A flaw has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. Affected by this issue is the function setup_conntrack of the file /sbin/rc. Executing a manipulation of the argument ct_tcp_timeout can lead to out-of-bounds write. The attack may be performed from remote. This project is superseded by FreshTomato.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Shibby Tomato

  • 1.28 RT-N5x MIPSR2 Build 124affected

References