First day on Intigriti: our agent harness found and proved a remote code execution bug, paid €3,000.

CVE-2025-71264

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Mumble before 1.6.870 is prone to an out-of-bounds array access, which may result in denial of service (client crash).

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published: Mar 16, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-712655.5In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent me CVE-2025-712665.5In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: check return value of indx_find to avoid infinite loop We f CVE-2025-712675.5In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST We foun CVE-2025-712685.5In the Linux kernel, the following vulnerability has been resolved: btrfs: fix reservation leak in some error paths when inserting inline e CVE-2025-712695.5In the Linux kernel, the following vulnerability has been resolved: btrfs: do not free data reservation in fallback from inline due to -ENO CVE-2025-71277.2A vulnerability, which was classified as critical, was found in itsourcecode Employee Management System up to 1.0. This affects an unknown p CVE-2025-712705.5In the Linux kernel, the following vulnerability has been resolved: LoongArch: Enable exception fixup for specific ADE subcode This patch CVE-2025-712715.5In the Linux kernel, the following vulnerability has been resolved: hfsplus: ensure sb->s_fs_info is always cleaned up When hfsplus was co CVE-2025-712725.5In the Linux kernel, the following vulnerability has been resolved: most: core: fix resource leak in most_register_interface error paths T CVE-2025-712735.5In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band() Simplify t CVE-2025-712744.7In the Linux kernel, the following vulnerability has been resolved: rpmsg: core: fix race in driver_override_show() and use core helper Th CVE-2025-712766.1SOGo before 5.12.5 is prone to a XSS vulnerability with events, tasks, and contacts categories.

CVE-2025-71264: Medium severity, CVSS 5.3 | Vulnix