Unrated severityNVD Advisory· Published Nov 21, 2012· Updated Jun 16, 2026
CVE-2012-4426
CVE-2012-4426
Description
Multiple format string vulnerabilities in mcrypt 2.6.8 and earlier might allow user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via vectors involving (1) errors.c or (2) mcrypt.c.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:mcrypt:mcrypt:*:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:mcrypt:mcrypt:*:*:*:*:*:*:*:*range: <=2.6.8
- cpe:2.3:a:mcrypt:mcrypt:2.6.4:*:*:*:*:*:*:*
- cpe:2.3:a:mcrypt:mcrypt:2.6.5:*:*:*:*:*:*:*
- cpe:2.3:a:mcrypt:mcrypt:2.6.6:*:*:*:*:*:*:*
- cpe:2.3:a:mcrypt:mcrypt:2.6.7:*:*:*:*:*:*:*
- (no CPE)range: <=2.6.8
Patches
Vulnerability mechanics
References
5News mentions
0No linked articles in our index yet.