CVE-2026-65421Disclosure

LOWCVSS 7.1 · HIGH

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The MMS BER decoder contains a flaw in decoding fixed-width BER fields (boolean/integer): an attacker-supplied length value is not validated, causing a read past the end of a heap buffer. This leads to termination of the MMS service process and a denial-of-service condition.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-125

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • 3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-07-31: 3Technical Details · 2026-07-31: 307-31
Signal classification1 categories
Disclosure
3100.0%
Referenced assets3 URLs
Full discourse3 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-65421 The MMS BER decoder contains a flaw in decoding fixed-width BER fields (boolean/integer) https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-65421

    Post summary

    The tweet announces CVE‑2026‑65421, detailing a flaw in the MMS BER decoder that corrupts fixed‑width BER field decoding, but provides no PoC, exploit code, or patch instructions.

    00011139
    4.1K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-65421 The MMS BER decoder contains a flaw in decoding fixed-width BER fields (boolean/integer): an attacker-supplied length value is not validated, causing a read past th… https://www.cve.org/CVERecord?id=CVE-2026-65421

    Post summary

    An unvalidated length field in the MMS BER decoder (CVE-2026-65421) allows a read‑past buffer; no PoC, exploit, active exploitation, patch, or false positive information is provided.

    00010868
    57.9K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-65421 The MMS BER decoder contains a flaw in decoding fixed-width BER fields (boolean/integer): an attacker-supplied length value is not validated, causing a read past th… https://www.cve.org/CVERecord?id=CVE-2026-65421 ----- Traducción: CVE-2026-65421 El … http://infoflow.cloud`

    Post summary

    The post announces CVE‑2026‑65421, detailing a buffer‑overread in the MMS BER decoder caused by unchecked length values, but it provides no Proof of Concept, exploit code, or patch information.

    0000037
    96 followersView on X

Explore more