CVE-2026-70457: rsync 3.2.3 < 3.5.0 Out-of-Bounds Write via parse_size_arg()

Overview

Severity
Medium (CVSS 6.5)
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Exploit Status
Not Exploited
Patch Tuesday
2026-Aug
Released
2026-08-23
EPSS Score
0.36% (percentile: 29.4%)

Affected Products (1)

Other

  • 21597-17084

Revision History

  • 2026-08-23: Information published.