Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in libcaca v0.99.beta19. A buffer overflow issue in caca_resize function in libcaca/caca/canvas.c may lead to local execution of arbitrary code in the user context.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
4 versions affected across 3 products
CVE-2026-42046: libcaca ≤0.99.beta20 integer overflow, heap write, RCE. Prior CVE-2021-3410 fix incomplete. Entity detects exposure. Patch: fb77acff9ba6bb01d53940da34fb10f20b156a23 https://0x2ed3bb60.xyz/threat/38bd6c3f2eacb741
Post summary
The text announces CVE‑2026‑42046, provides specific vulnerability details, and supplies a patch commit hash and a related URL, indicating that a fix is available.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | debian | debian_linux | 9.0 | - | - |
| OS | fedoraproject | fedora | 34 | - | - |
| OS | fedoraproject | fedora | 35 | - | - |
| App | libcaca_project | libcaca | 0.99 | - | - |