Out of Bounds Read Vulnerability in CodeMeter Runtime by Wibu-Systems
CVE-2026-81575

7.5HIGH

Key Information:

Vendor

Wibu-systems-ag

Status
Codemeter-runtime
Vendor
CVE Published:
27 August 2026

What is CVE-2026-81575?

The CodeMeter Runtime by Wibu-Systems is vulnerable to a potential out of bounds read due to inadequate bounds checking on data length values when processing requests with opcode 0x5e. This vulnerability may lead to unexpected behavior such as segmentation faults, resulting in crashes of the CodeMeter Runtime. Users are encouraged to upgrade to the latest versions (8.41a or 9.10 and above) to mitigate these risks.

Affected Version(s)

codemeter-runtime 9.00 < 9.10

codemeter-runtime 8.00 < 8.41a

codemeter-runtime 7.00

References

https://cdn.wibu.com/fileadmin/wibu_downloads/security_ad...
vendor-advisory

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Andrew Teylu of Vector Informatik GmbH
.