CERT24CVE-2026-53792 — rsync < 3.5.0 Out-of-Bounds Read via Zero-Length Checksum BlockLoading data…
CERT24Threat Observatory
Period

CVE-2026-53792 — rsync < 3.5.0 Out-of-Bounds Read via Zero-Length Checksum Block

Rsync versions before 3.5.0 contain an out-of-bounds read vulnerability in sender-side block matching logic. A malicious receiver can send a zero-length checksum block that may cause memory access before the start of an allocated buffer.

← Back to intelligence

CVE-2026-53792 — rsync < 3.5.0 Out-of-Bounds Read via Zero-Length Checksum Block

Rsync versions before 3.5.0 contain an out-of-bounds read vulnerability in sender-side block matching logic. A malicious receiver can send a zero-length checksum block that may cause memory access before the start of an allocated buffer.