CVE-2026-3407

Medium CVSS: 4.8

A vulnerability was determined in YosysHQ yosys up to 0.62. This affects the function Yosys::RTLIL::Const::set of the file kernel/rtlil.h of the component BLIF File Parser. This manipulation causes heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized. Applying a patch is the recommended action to fix this issue. It appears that the issue is not reproducible all the time.

Vendor

Product

CWE

CWE-119

Yayın Tarihi

2026-03-02 03:16:01

Güncelleme

2026-03-02 20:30:10

Source Identifier

cna@vuldb.com

KEV Date Added

Kategoriler

CWE-119 MEDIUM 2026

Referanslar

https://github.com/YosysHQ/yosys/ https://github.com/YosysHQ/yosys/issues/5677 https://github.com/YosysHQ/yosys/pull/5680 https://github.com/YosysHQ/yosys/pull/5681 https://github.com/oneafter/0210/blob/main/yo2/repro https://vuldb.com/?ctiid.348302 https://vuldb.com/?id.348302 https://vuldb.com/?submit.763755