CVE-2026-103679: Tnef: use-after-free and double-free in get_body_files() via multi-value body extraction

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-10-01 · updated 2026-10-05
Weakness: CWE-416

Description

A flaw was found in tnef. A remote attacker could exploit this vulnerability by providing a specially crafted Transport Neutral Encapsulation Format (TNEF) file containing multiple message bodies. During extraction, improper memory management triggers a use-after-free and double-free condition, causing the application to crash and resulting in a Denial of Service (DoS).

Affected products

Tnef Project Tnef: through 1.4.18

References

https://access.redhat.com/security/cve/CVE-2026-103679
https://bugzilla.redhat.com/show_bug.cgi?id=2544477
https://github.com/verdammelt/tnef

Get alerted when CVE-2026-103679 or the next vulnerability affects your stack