CVE-2026-84268
Received Received - Intake

Heap Buffer Overflow in GNOME GVFS SFTP Backend

Publication date: 2026-09-01

Last updated on: 2026-09-01

Assigner: redhat-SADP

Description
A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause read_reply() to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing the operation to write past the intended boundaries. This issue allows a malicious server to corrupt adjacent heap memory in the gvfsd-sftp process, resulting in a denial of service as the process aborts upon detecting the heap corruption or potentially allowing arbitrary code execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-01
Last Modified
2026-09-01
Generated
2026-09-01
AI Q&A
2026-09-01
EPSS Evaluated
N/A
NVD
CVE-2026-84268
EUVD
EUVD-2026-69287

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
gnome gvfs *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-122 A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the SFTP backend of gvfs. When a user mounts a share and reads a file, a malicious SFTP server can send a response with a length that exceeds the requested size. The function does not check if the server-provided length fits within the allocated buffer, causing it to write outside intended memory. This can corrupt heap memory in the gvfsd-sftp process, leading to a denial of service or potentially arbitrary code execution.

Detection Guidance

This vulnerability involves a malicious SFTP server exploiting heap corruption in gvfs. Detection requires monitoring for abnormal gvfsd-sftp process behavior or crashes during SFTP operations. Check system logs for gvfs-related errors or heap corruption messages. No specific commands are provided in the context to directly detect this issue.

Impact Analysis

If you connect to a malicious SFTP server, it could crash the gvfsd-sftp process on your system, causing a denial of service. In rare cases, it might allow the attacker to execute arbitrary code on your machine, potentially leading to data theft or further compromise.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches if exploited, which may violate GDPR or HIPAA requirements for data protection and confidentiality. Organizations using affected systems may face compliance violations and potential penalties.

Mitigation Strategies

Immediately update gvfs to the latest patched version. Avoid connecting to untrusted SFTP servers. Disable SFTP functionality if not required. Monitor gvfsd-sftp processes for crashes or abnormal behavior. Apply vendor patches as soon as they become available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-84268. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart