CVE-2026-103679— Tnef: use-after-free and double-free in get_body_files() via multi-value body extraction
Quick assessment
Affected
CVE-2026-103679
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 tnef 中发现了一个漏洞。远程攻击者可以通过提供一个包含多个消息主体的特制传输中性封装格式（TNEF）文件来利用此漏洞。在提取过程中，不当的内存管理会触发释放后使用（use-after-free）和双重释放（double-free）条件，导致应用程序崩溃，从而造成拒绝服务（DoS）。
Possible ATT&CK Techniques 1 AI
T1566.001 · Spearphishing AttachmentI. Basic Information for CVE-2026-103679
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Tnef: use-after-free and double-free in get_body_files() via multi-value body extraction
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in tnef. A remote attacker could exploit this vulnerability by providing a specially crafted Transport Neutral Encapsulation Format (TNEF) file containing multiple message bodies. During extraction, improper memory management triggers a use-after-free and double-free condition, causing the application to crash and resulting in a Denial of Service (DoS).
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
释放后使用
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | - | 0 ~ 1.4.18 | - |
|
II. Public POCs for CVE-2026-103679
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-103679
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-103679 (2)
-
-
🔗 2544477 – (CVE-2026-103679) CVE-2026-103679 tnef: Use-after-free and double-free in get_body_files() via multi-value body extraction issue-tracking x_refsource_REDHAT
Other References for CVE-2026-103679 (1)
IV. Related Vulnerabilities
Same weakness: CWE-416
-
CVE-2026-73637
Apache HTTP Server: mod_auth_digest DoS attack -
CVE-2026-57941
Apache HTTP Server: mod_http2 use-after-free / wild write vi -
CVE-2026-56154
Apache HTTP Server: mod_rewrite use-after-free via %{LA-U:HT -
CVE-2026-101276
iperf3 3.21远程堆释放后使用漏洞 -
CVE-2026-19445
Use-after-free of a server-side SSLContext when sni_callback
V. Comments for CVE-2026-103679
No comments yet