← All advisories

Low severity3.7NVD Advisory· Published Mar 16, 2026· Updated Apr 2, 2026

CVE-2025-71264

CVE-2025-71264

Description

Mumble before 1.6.870 is prone to an out-of-bounds array access, which may result in denial of service (client crash).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Mumble/Mumble2 versions
cpe:2.3:a:mumble:mumble:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mumble:mumble:*:*:*:*:*:*:*:*range: <1.6.870
- (no CPE)range: <1.6.870
osv-coords2 versions
pkg:rpm/opensuse/mumble&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/mumble&distro=openSUSE%20Tumbleweed
< 1.5.857-bp160.1.1+ 1 more
- (no CPE)range: < 1.5.857-bp160.1.1
- (no CPE)range: < 1.5.857-2.1

Patches

Vulnerability mechanics

References

3

github.com/mumble-voip/mumble/commit/ff2a2332cccb267721553f09c0ded4de880622e0nvdPatch
github.com/mumble-voip/mumble/pull/7032nvdIssue TrackingPatch
bugs.debian.org/1129178nvdMailing List

News mentions

0

No linked articles in our index yet.