Heap-based Out-of-Bounds Write Vulnerability in Wazuh by Wazuh

CVE-2026-41499

What is CVE-2026-41499?

Wazuh, an open-source platform for threat detection and response, is affected by multiple heap-based out-of-bounds write vulnerabilities. These vulnerabilities reside in the parse_uname_string() function, which handles OS identification data from agents. The issue arises from an unsafe code pattern that fails to verify whether input strings are empty. When an empty string is processed, the calculation of the length of the string results in unsigned integer underflow, allowing for an out-of-bounds write. Consequently, this can corrupt heap metadata, leading to potential exploitation. The issue has been addressed in Wazuh version 4.14.4.

References