High severity7.5NVD Advisory· Published Sep 4, 2026· Updated Sep 9, 2026

CVE-2026-85505

Description

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmi_oem_fujitsu_get_sel_entry_long_text in ipmi-oem/ipmi-oem-fujitsu.c when a BMC provides a short response, a different vulnerability than CVE-2026-50031 (which has different affected versions).

Affected products

osv-coords2 versions
pkg:rpm/opensuse/freeipmi&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/freeipmi&distro=openSUSE%20Leap%2016.0
< 1.6.19-1.1+ 1 more
- (no CPE)range: < 1.6.19-1.1
- (no CPE)range: < 1.6.15-160000.5.1
FreeIPMI/FreeIPMIllm-fuzzy
Range: <1.6.19

Patches

Vulnerability mechanics

References

ftp.gnu.org/gnu/freeipmi/freeipmi-1.6.19.tar.gznvd
www.gnu.org/software/freeipmi/nvd
www.openwall.com/lists/oss-security/2026/08/28/5nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000