Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2026-44066

Heap out-of-bounds reads in Spotlight RPC unmarshalling

Description

Multiple heap out-of-bounds reads in the Spotlight RPC unmarshalling code in Netatalk 3.1.0 through 4.4.2 allow a remote authenticated attacker to obtain sensitive information or cause a minor service disruption.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Netatalk Netatalk

Default version status: unaffected

  • 3.1.0 to ≤ 4.4.2affected
  • 4.4.3unaffected

References