Stack-Based Buffer Overflow in Wazuh Database Synchronization Module

CVE-2026-25772

What is CVE-2026-25772?

A stack-based buffer overflow vulnerability exists in the Wazuh Database synchronization module, which is triggered by improper handling of SQL query construction. Specifically, versions from 4.4.0 to 4.14.3 contain code that can result in an integer underflow during buffer size calculations. If an attacker crafts a specific query payload that exceeds 2048 bytes, the flawed logic may lead to stack corruption. This could result in Denial of Service (DoS) conditions or, in some cases, allow for remote code execution (RCE), emphasizing the need for users to update to version 4.14.3 or later to mitigate this risk.

References