점검 대응높음KEV 미등록
CVE-2026-49416
FreeBSD FreeBSD, freebsd 취약점
The CONS_HISTORY ioctl handler did not adequately validate the requested history size. A large value caused an integer overflow in the buffer size calculation, resulting in a heap allocation smaller than expected. Subsequent initialization of the buffer wrote beyond the end of the allocation. An unprivileged local user with access to a vt(4) device can trigger an out-of-bounds write in the kernel, potentially escalating privileges.
- 대응 우선순위
- 점검
- CVSS
- 7.8
- EPSS
- 0.11% 백분위 1.32% · 2026.08.02 기준
- CISA KEV
- 미등록
- 조치 기한
- -
- 공개일
- 2026.06.27