Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-44048

Stack buffer overflow via UCS-2 type confusion in convert_charset()

Description

A stack-based buffer overflow via UCS-2 type confusion in convert_charset() in Netatalk 2.0.4 through 4.4.2 allows a remote authenticated attacker to execute arbitrary code or cause a denial of service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Netatalk Netatalk

Default version status: unaffected

  • 2.0.4 to ≤ 4.4.2affected
  • 4.4.3unaffected

References