Heap Out-of-Bounds Read Vulnerability in libsmb2 by Samba
CVE-2026-110713

7.1HIGH

Key Information:

Vendor

Sahlberg

Status
Libsmb2
Vendor
CVE Published:
14 October 2026

Badges

👾 Exploit Exists

What is CVE-2026-110713?

The libsmb2 library, version 6.2, is susceptible to a heap out-of-bounds read vulnerability. This occurs in the functions responsible for decoding file system volume and attribute information, specifically smb2_decode_file_fs_volume_info and smb2_decode_file_fs_attribute_info. By exploiting this vulnerability, malicious SMB servers can craft improper QUERY_INFO replies, manipulating name lengths in a way that may lead to the client reading beyond valid memory buffers. This could ultimately crash the client or expose sensitive information, allowing attackers to gain unauthorized access to system resources.

Affected Version(s)

libsmb2 0 <= 6.2

References

https://hackmd.io/@haind-pwn/libsmb2-query-info-reply-oob...
technical-descriptionexploit
https://github.com/sahlberg/libsmb2/blob/d67e213a5c4e7e49...
technical-description
https://github.com/sahlberg/libsmb2/commit/dd0bbdee24bb56...
patch

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Benjamin Ali
HaiND from the Post and Telecommunication Institute of Technology
.