CVE-2026-24822

10.0

Critical

Published:27 Jan 2026

Last updated:17 Jun 2026

Source:cve_disclosure@tech.gov.sg

Deferred

Weakness (CWE)

CWE-122Heap-based Buffer Overflow
CWE-787Out-of-bounds Write

CVSS Vector

v4.0

Attack Vector: Network
Attack Complexity: Low
Attack Requirements: None
Privileges Required: None
User Interaction: None
Confidentiality (Vulnerable): High
Integrity (Vulnerable): High
Availability (Vulnerable): High
Confidentiality (Subsequent): High
Integrity (Subsequent): High
Availability (Subsequent): High

View on MITRE Find PoC on GitHub

Description

Out-of-bounds Write, Heap-based Buffer Overflow vulnerability in ttttupup wxhelper (src modules). This vulnerability is associated with program files mongoose.C. This issue affects wxhelper: through 3.9.10.19-v1.

References

cve_disclosure@tech.gov.sg

https://github.com/ttttupup/wxhelper/pull/515