Out-of-Bounds Write Vulnerability in KeePassXC by KeepassXC Team

CVE-2026-118673

What is CVE-2026-118673?

KeePassXC, a popular cross-platform password manager, contains an out-of-bounds write vulnerability due to flaws in its browser integration. The issue arises when the application processes authorized responses using a fixed output vector while the encryption process requires a variable length based on the plaintext size. If exploited, a malicious client can manipulate the database association and create excessively large responses, leading to a buffer overflow that compromises security. This vulnerability has been addressed in version 2.8.0, which prevents the possibility of such unauthorized memory accesses.

References