Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-113352 1 Utox 1 Utox 2026-10-20 7.5 High
uTox through 0.18.1 contains a path traversal vulnerability that allows Tox friends to write arbitrary files by sending absolute or ../ file names to victims with auto-accept enabled. Attackers can overwrite shell startup files or plant crafted .ftinfo resume records that ft_find_resumeable() loads, abusing FILE pointers to write /proc/self/mem and execute code.