Vulnerability Description
rsync 3.0.1 before 3.5.0 contains an out-of-bounds write vulnerability in the read_args() function that allows a malicious sender to corrupt adjacent heap memory by sending a crafted argument list. When the argument count causes the argv allocation to be exactly full, the trailing NULL terminator is written one slot beyond the allocation boundary, corrupting adjacent heap memory.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/RsyncProject/rsync/releases/tag/v3.5.0
- https://github.com/RsyncProject/rsync/security/advisories/GHSA-78jc-79jv-v6rw
- https://www.vulncheck.com/advisories/rsync-heap-out-of-bounds-write-via-read-arg
FAQ
What is CVE-2026-70456?
CVE-2026-70456 is a vulnerability with a CVSS score of 8.2 (HIGH). rsync 3.0.1 before 3.5.0 contains an out-of-bounds write vulnerability in the read_args() function that allows a malicious sender to corrupt adjacent heap memory by sending a crafted argument list. Wh...
How severe is CVE-2026-70456?
CVE-2026-70456 has been rated HIGH with a CVSS base score of 8.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-70456?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.