Skip to content
CVE PROGRAM SOURCE RECORD3.7 Low

CVE-2026-43964

Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third n

Description

Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Postfix Postfix

Default version status: unaffected

  • 2.3 to < 3.8.16affected
  • 3.9 to < 3.9.10affected
  • 3.10 to < 3.10.9affected

References