CVE-2026-12386 | THREATINT

Description

Improper null termination vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Overflow Buffers. This issue affects Pardus Pen: from <=4.1.5 before 4.2.1.

PUBLISHED Reserved 2026-06-16 | Published 2026-07-05 | Updated 2026-07-06 | Assigner TR-CERT

LOW: 3.9CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L

Problem types

CWE-170 Improper null termination

Product status

Default status

unaffected

<=4.1.5 (custom) before 4.2.1

affected

Credits

Muhammed KAYA finder

References

siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0499 government-resource

cve.org (CVE-2026-12386)

nvd.nist.gov (CVE-2026-12386)

Download JSON