CVE-2026-112063— libstrophe through 0.14.0 Stack-Based Buffer Overflow via SCRAM Salt in SCRAM_Hi
Quick assessment
Affected
strophe libstrophe
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
libstrophe（版本至 0.14.0 为止）在 SCRAM_Hi 函数中存在基于栈的缓冲区溢出漏洞。恶意 XMPP 服务器可通过发送过大的 SCRAM 盐值，溢出一个 128 字节的栈缓冲区。攻击者可构造一个服务器首次消息，使其 s= 属性解码后超过 124 字节，从而导致客户端终止运行，或在未启用调试断言（NDEBUG）的构建版本中覆盖栈内存。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-112063
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
libstrophe through 0.14.0 Stack-Based Buffer Overflow via SCRAM Salt in SCRAM_Hi
Source: CVE Program / CVE List V5
Vulnerability Description
libstrophe through 0.14.0 contains a stack-based buffer overflow vulnerability in SCRAM_Hi that allows malicious XMPP servers to overflow a 128-byte stack buffer by sending an oversized SCRAM salt. Attackers can send a server-first-message whose s= attribute decodes to more than 124 bytes, aborting the client or overwriting stack memory in NDEBUG builds.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
栈缓冲区溢出
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| strophe | libstrophe | 0 ~ 0.14.0 | - |
|
II. Public POCs for CVE-2026-112063
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-112063
请登录查看更多情报信息。
Other References for CVE-2026-112063 (4)
-
https://github.com/strophe/libstrophe/blob/0.14.0/src/scram.c technical-description
-
https://hackmd.io/@haindpwn/libstrophe-scram-salt-stack-overflow third-party-advisory
-
https://github.com/strophe/libstrophe/blob/0.14.0/src/sasl.c technical-description
IV. Related Vulnerabilities
Same weakness: CWE-121
-
CVE-2026-112062
lwIP through 2.2.1 Stack Out-of-Bounds Write via mDNS Search -
CVE-2026-111711
Netcore NR256CN through 1.5.140116 Pre-Auth Stack Overflow v -
CVE-2026-108445
Microsoft Office Word Remote Code Execution Vulnerability -
CVE-2026-108440
Microsoft Office Word Remote Code Execution Vulnerability -
CVE-2026-108431
Microsoft Office Word Remote Code Execution Vulnerability
V. Comments for CVE-2026-112063
No comments yet