vulnerability

Debian: CVE-2023-26266: aflplusplus -- security update

Severity

CVSS

(AV:L/AC:M/Au:S/C:C/I:C/A:C)

Published

Feb 21, 2023

Added

Jul 30, 2024

Modified

Mar 30, 2026

Description

In AFL++ 4.05c, the CmpLog component uses the current working directory to resolve and execute unprefixed fuzzing targets, allowing code execution.

debian-upgrade-aflplusplus

Rapid7 Labs

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.