Critical severity9.8NVD Advisory· Published Sep 4, 2026· Updated Sep 14, 2026

CVE-2026-85507

Description

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_info in ipmi-oem/ipmi-oem-dell.c (cmc-info subcommand to dell get-system-info).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

FreeIPMI/FreeIPMIllm-fuzzy
Range: <1.6.19
osv-coords2 versions
pkg:rpm/opensuse/freeipmi&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/freeipmi&distro=openSUSE%20Tumbleweed
< 1.6.15-160000.5.1+ 1 more
- (no CPE)range: < 1.6.15-160000.5.1
- (no CPE)range: < 1.6.19-1.1

Patches

Vulnerability mechanics

References

ftp.gnu.org/gnu/freeipmi/freeipmi-1.6.19.tar.gznvd
www.gnu.org/software/freeipmi/nvd
www.openwall.com/lists/oss-security/2026/08/28/5nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000