Critical severity9.8NVD Advisory· Published Sep 4, 2026· Updated Sep 8, 2026
CVE-2026-85509
CVE-2026-85509
Description
FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than requested.
Affected products
3- osv-coords2 versionspkg:rpm/opensuse/freeipmi&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/freeipmi&distro=openSUSE%20Leap%2016.0
< 1.6.19-1.1+ 1 more
- (no CPE)range: < 1.6.19-1.1
- (no CPE)range: < 1.6.15-160000.5.1
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.