CVE-2026-4750 Out-of-bounds Read in fabiangreffrath woof

Critical 9.1 Published Updated

An out-of-bounds read in woof allows attackers to cause denial of service or disclose sensitive memory information.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Over the internet
Victim action needed
Not needed
Fix
Available

What is CVE-2026-4750?

CVE-2026-4750 is a critical memory corruption vulnerability in fabiangreffrath woof, published on 24 Mar 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Out-of-bounds Read vulnerability in fabiangreffrath woof.This issue affects woof: before woof_15.3.0.

Weakness: CWE-125

Which versions are affected by CVE-2026-4750?

How do I fix CVE-2026-4750?

Upgrade to a fixed version.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2026-4750 being exploited?

There is no known exploitation of CVE-2026-4750 in the wild and no public exploit code.

Sources

Also known as DEBIAN-CVE-2026-4750, GHSA-r29r-g6g3-64qx, UBUNTU-CVE-2026-4750.

Is CVE-2026-4750 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free