CVE-2026-107161

Summary

A heap-based buffer overflow exists in Cyrus SASL's DIGEST-MD5 plugin where improperly calculated buffer sizes during challenge field processing can lead to out-of-bounds writes when special characters are escaped, potentially allowing remote code execution or application crashes.

Exploitability

Exploitation requires a malicious server to send crafted challenge fields that trigger the overflow, with minimal preconditions beyond network access to a vulnerable client.

Blast radius

The flaw could affect any application using Cyrus SASL for DIGEST-MD5 authentication, particularly email clients and web applications, potentially causing widespread service disruptions through crashes.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Cyrus SASL version 2.600 or later which contains the fix for this buffer overflow vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.