{"id":"CVE-2026-19477","state":"PUBLISHED","title":"Stack-based Buffer Overflow Vulnerability in Linux (uldaq)","description":"There\nis stack-based buffer overflow vulnerability recently discovered in MCC Universal Library for Linux (uldaq).  This may result in information disclosure or arbitrary code\nexecution. This vulnerability affects MCC Universal Library for Linux (uldaq) v1.2.1\nand prior versions.","publishedAt":"2026-09-17T18:42:17.190Z","updatedAt":"2026-09-28T15:49:05.252Z","severity":{"score":8.6,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","source":"NI"},"assigner":"NI","products":["MCC Universal Library for Linux (uldaq)"],"affected":[{"vendor":"MCC","product":"Universal Library for Linux (uldaq)","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"1.2.1","versionType":"semver"}]}],"references":["https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/stack-based-buffer-overflow-vulnerability-linux-uldaq.html","https://github.com/mccdaq/uldaq/security/advisories/GHSA-9jr3-33mw-g6jc"],"weaknesses":["CWE-121"],"ingestedAt":"2026-10-29T20:11:10.572Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/19xxx/CVE-2026-19477.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-19477","state":"PUBLISHED","datePublished":"2026-09-17T18:42:17.190Z","dateUpdated":"2026-09-28T15:49:05.252Z","assignerShortName":"NI","assignerOrgId":"bca5b2e8-03a4-4781-b4ca-c6a078c0bfd4","dateReserved":"2026-08-10T14:54:21.681Z"},"containers":{"cna":{"title":"Stack-based Buffer Overflow Vulnerability in Linux (uldaq)","descriptions":[{"lang":"en","value":"There\nis stack-based buffer overflow vulnerability recently discovered in MCC Universal Library for Linux (uldaq).  This may result in information disclosure or arbitrary code\nexecution. This vulnerability affects MCC Universal Library for Linux (uldaq) v1.2.1\nand prior versions."}],"affected":[{"vendor":"MCC","product":"Universal Library for Linux (uldaq)","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"1.2.1","versionType":"semver"}]}],"references":[{"url":"https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/stack-based-buffer-overflow-vulnerability-linux-uldaq.html"},{"url":"https://github.com/mccdaq/uldaq/security/advisories/GHSA-9jr3-33mw-g6jc"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseSeverity":"HIGH","baseScore":7.8,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}},{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV4_0":{"attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","subIntegrityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","version":"4.0","baseSeverity":"HIGH","baseScore":8.6,"vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-121","lang":"en","description":"CWE-121 Stack-based buffer overflow","type":"CWE"}]}],"providerMetadata":{"shortName":"NI","orgId":"bca5b2e8-03a4-4781-b4ca-c6a078c0bfd4","dateUpdated":"2026-09-28T15:49:05.252Z"},"impacts":[{"capecId":"CAPEC-100","descriptions":[{"lang":"en","value":"CAPEC-100 Overflow Buffers"}]}],"cpeApplicability":[{"operator":"OR","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcc:universal_library_for_linux_uldaq_:*:*:*:*:*:*:*:*","versionStartIncluding":"0","versionEndIncluding":"1.2.1"}]}]}],"credits":[{"lang":"en","value":"Tsurumi Junichi of Panasonic Holdings Corporation","type":"finder"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.5"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-09-17T20:04:00.493759Z","id":"CVE-2026-19477","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-09-17T20:05:52.443Z"}}]}}}