CVE detail
CVE-2026-13757
A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing nested CKA_WRAP_TEMPLATE, CKA_UNWRAP_TEMPLATE, and CKA_DERIVE_TEMPLATE attributes. An unauthenticated attacker with local access to the p11-kit RPC Unix domain socket can send a specially crafted request with deeply nested template attributes, causing stack exhaustion and crashing the p11-kit server process and its dependent services.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 19.5 · diversity 16.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 6
- within the 30d window
- Peak daily
- 5
- highest bucket
Evidence
Source links by recency
6 source links · newest first
- CVE-2026-13757 P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsingMicrosoft MSRC
Information published.
vendormsrc.microsoft.comJul 3, 2026, 8:04 AM - https://access.redhat.com/errata/RHSA-2026:38342access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 29, 2026, 7:16 PM No excerpt available.
Exploitgithub.comJun 29, 2026, 7:16 PM- https://bugzilla.redhat.com/show_bug.cgi?id=2494556bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comJun 29, 2026, 7:16 PM - https://access.redhat.com/security/cve/CVE-2026-13757access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 29, 2026, 7:16 PM - https://access.redhat.com/errata/RHSA-2026:37469access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 29, 2026, 7:16 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-0990CVSS 5.9 · Medium
A flaw was found in libxml2, an XML parsing library. This uncontrolled recursion vulnerability occurs in the xmlCatalogXMLResolveURI function when an XML catalog contains a delega…
- CVE-2026-0989CVSS 3.7 · Low
A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not enforce a limit on inclusion depth when resolving…
- CVE-2026-13595CVSS 6.8 · Medium
A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a paren…
- CVE-2026-55653CVSS 4.3 · Medium
A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Fed…
- CVE-2026-48864CVSS 7.8 · High
A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to insufficient input valida…
- CVE-2026-9149CVSS 6.5 · Medium
A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted `.solv` file containing negative size values in the `repo_a…