Out-of-Bounds Read Vulnerability in liftoff-sr CIPster
CVE-2026-16013

6.9MEDIUM

Key Information:

Vendor

Liftoff-sr

Status
Cipster
Vendor
CVE Published:
17 July 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-16013?

A vulnerability exists in the liftoff-sr CIPster, specifically in the CipAppPath::deserialize_symbolic function located within source/src/cip/cipepath.cc. This issue allows manipulation that results in an out-of-bounds read, which could potentially be exploited remotely. The vulnerability affects versions before the commit identified by 632336d414ef708a542377c1aa8d6fdb7c70a760. For remediation, users are advised to apply the patch available at commit 886a4d090e1c5b0475f0b1c2fe0606a8f0d6a519.

Affected Version(s)

CIPster 632336d414ef708a542377c1aa8d6fdb7c70a760

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-16013 - Proof of Concept

References

https://vuldb.com/vuln/379755
vdb-entrytechnical-description
https://vuldb.com/vuln/379755/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-16013
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Chuan Wei
VULL (VulDB User)
VULL (VulDB User)
.