CVE-2026-43964CWE-193

CVE-2026-43964

Low · published May 4, 2026

CVSS v3.1
3.7
EPSS
1%
Percentile
58.8
In the wild
Unconfirmed
What it is

Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00884 · 58.8th percentile
Weakness
CWE-193 · Off-by-one Error
Published
2026-05-04T23:16Z
Affected products (3)
ProductVersionsFixed in
postfix/postfix< 3.8.163.8.16
postfix/postfix≥ 3.9.0, < 3.9.103.9.10
postfix/postfix≥ 3.10.0, < 3.10.93.10.9
References (13)
https://www.mail-archive.com/[email protected]/msg00110.html · [email protected]http://www.openwall.com/lists/oss-security/2026/05/04/30 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2026:25930 · 0b0ca135-0b70-47e7-9f44-1890c2a1c46chttps://access.redhat.com/errata/RHSA-2026:25932 · 0b0ca135-0b70-47e7-9f44-1890c2a1c46chttps://access.redhat.com/errata/RHSA-2026:26205 · 0b0ca135-0b70-47e7-9f44-1890c2a1c46chttps://access.redhat.com/errata/RHSA-2026:50963 · 0b0ca135-0b70-47e7-9f44-1890c2a1c46chttps://access.redhat.com/errata/RHSA-2026:50964 · 0b0ca135-0b70-47e7-9f44-1890c2a1c46chttps://access.redhat.com/errata/RHSA-2026:51034 · 0b0ca135-0b70-47e7-9f44-1890c2a1c46chttps://access.redhat.com/errata/RHSA-2026:51436 · 0b0ca135-0b70-47e7-9f44-1890c2a1c46chttps://access.redhat.com/errata/RHSA-2026:57174 · 0b0ca135-0b70-47e7-9f44-1890c2a1c46chttps://access.redhat.com/security/cve/CVE-2026-43964 · 0b0ca135-0b70-47e7-9f44-1890c2a1c46chttps://bugzilla.redhat.com/show_bug.cgi?id=2466488 · 0b0ca135-0b70-47e7-9f44-1890c2a1c46chttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43964.json · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
EPSS history
Timeline
  • 04 MAY 18:10Z
    Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks…
    cvelistv5