Heap-Based Buffer Overflow in Hashcat by Vendor Hashcat

CVE-2026-68768

What is CVE-2026-68768?

A heap-based buffer overflow vulnerability exists in Hashcat due to improper validation in the outfile_write() function. When processing output into a buffer, the function does not check the cumulative size against the buffer limit while appending usernames, hashes, and plaintext data. This oversight can be exploited by supplying an oversized username through a crafted hash file, resulting in memory corruption and potentially crashing the application during execution.

References