Skip to content
CVE PROGRAM SOURCE RECORD3.1 Low

CVE-2026-44057

Dead bounds check in Spotlight RPC unmarshaller

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
securin

Description

A dead bounds check in the Spotlight RPC unmarshaller in Netatalk 3.0.0 through 4.4.2 results in an unreachable code path that provides no effective bounds protection, which may allow a remote authenticated attacker to obtain limited information via crafted Spotlight RPC requests.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Netatalk Netatalk

Default version status: unaffected

  • 3.0.0 to ≤ 4.4.2affected
  • 4.4.3unaffected

References