CVE-2026-4012 - rxi fe fe.c read_ out-of-bounds

Back Back to CVE browser

MEDIUM

rxi fe fe.c read_ out-of-bounds

Published Mar 12, 2026

4.8

MEDIUM

CVSS 4.0

EPSS 0.16%

Description

A vulnerability was determined in rxi fe up to ed4cda96bd582cbb08520964ba627efb40f3dd91. The impacted element is the function read_ of the file src/fe.c. This manipulation with the input 1 causes out-of-bounds read. The attack requires local access. The exploit has been publicly disclosed and may be utilized. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.

Affected products

Vendor Rxi Product FE Default
n/a
- Version
  
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Rxi

n/a

Version	Status	Constraints
	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-125

Out-of-bounds Read

References (6)

https://github.com/oneafter/0211/blob/main/fe/repro
exploit
https://github.com/rxi/fe/
product
https://github.com/rxi/fe/issues/34
issue-tracking
https://vuldb.com/?ctiid.350534
signaturepermissions-required
https://vuldb.com/?id.350534
vdb-entrytechnical-description
https://vuldb.com/?submit.769774
third-party-advisory

Link	Providers	Tags
https://github.com/oneafter/0211/blob/main/fe/repro		exploit
https://github.com/rxi/fe/		product
https://github.com/rxi/fe/issues/34		issue-tracking
https://vuldb.com/?ctiid.350534		signaturepermissions-required
https://vuldb.com/?id.350534		vdb-entrytechnical-description
https://vuldb.com/?submit.769774		third-party-advisory