Out-of-Bounds Write Vulnerability in Rsync 3.2.3 by Rsync Project

CVE-2026-70457

What is CVE-2026-70457?

An out-of-bounds write vulnerability exists in rsync version 3.2.3 and prior, originating from the parse_size_arg() function. This flaw occurs because the return value of snprintf() is used as an index into a .bss-segment array without adequate bounds checking. If snprintf truncates the size string, the resultant value may exceed the array length, leading to memory corruption by writing to locations outside the intended bounds.

References