What’s Vulnerable › Vulnerabilities
CVE-2026-81575: Missing Sanity Checks for Buffer Lengths
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-08-27 · updated 2026-09-01
- Weakness: CWE-130
Description
If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 accepts requests with opcode 0x5e, which contain the data length and the data itself. Missing bounds checking on the data length value can lead to out of bounds reads, causing a segmentation fault that ultimately crashes the CodeMeter Runtime.
Affected products
- wibu-systems-ag codemeter-runtime: from 9.00 before 9.10; from 8.00 before 8.41a — fixed in 8.41a, 9.10
How to fix
Upgrade to a fixed version: wibu-systems-ag codemeter-runtime 8.41a, 9.10. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2026-81575 or the next vulnerability affects your stack