CVE-2026-108683

Katalog CVE

CVSS 4.3 · Medium EPSS 0,31%

Kerentanan Uncontrolled Resource Consumption. Skor CVSS 3.1 4.3 (Medium) menurut vuldb.com.

Deskripsi (NVD)

A security vulnerability has been detected in zhayujie CowAgent up to 2.1.9. The impacted element is an unknown function of the component Media Download Handler. Such manipulation leads to uncontrolled memory allocation. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 2.2.0 is sufficient to resolve this issue. The name of the patch is b7967210268fc4c0afea1078223e74e7e96a8a54. You should upgrade the affected component.

Rincian

Terbit di NVD

11 Oktober 2026

Terakhir diubah

13 Oktober 2026

Status NVD

Deferred

CVSS 3.1

4.3 (Medium), sumber vuldb.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-400: Uncontrolled Resource Consumption
CWE-789: Memory Allocation with Excessive Size Value

EPSS (30 hari)

0,31% peluang dieksploitasi; lebih tinggi dari 22,0% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://github.com/lche511/cve/tree/main/CowAgent_Channel_Media_Download_DoS_Report
• https://github.com/zhayujie/CowAgent/
• https://github.com/zhayujie/CowAgent/commit/b7967210268fc4c0afea1078223e74e7e96a8a54
• https://github.com/zhayujie/CowAgent/releases/tag/2.2.0
• https://vuldb.com/cve/CVE-2026-108683
• https://vuldb.com/submit/958015
• https://vuldb.com/vuln/416391
• https://vuldb.com/vuln/416391/cti