A vulnerability identified as critical has been detected in joncampbell123 doslib 20250729 . Affected by this issue is some unknown functionality. Performing a manipulation results in memory corruption. This vulnerability was named CVE-2026-33851 . The attack needs to be approached locally. There is no available exploit. You should upgrade the affected component.
Full text archived locally
✦ AI Summary· Claude Sonnet
VDB-352684 · CVE-2026-33851 · GCVE-0-2026-33851
JONCAMPBELL123 DOSLIB 20250729 MEMORY CORRUPTION
HISTORYDIFFRELATEJSONXMLCTI
CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score
6.4 $0-$5k 2.67+
Summaryinfo
A vulnerability labeled as critical has been found in joncampbell123 doslib 20250729. This affects an unknown part. Executing a manipulation can lead to memory corruption. The identification of this vulnerability is CVE-2026-33851. The attack can only be executed locally. There is no exploit available. The affected component should be upgraded.
Detailsinfo
A vulnerability classified as critical was found in joncampbell123 doslib 20250729. This vulnerability affects an unknown part. The manipulation with an unknown input leads to a memory corruption vulnerability. The CWE definition for the vulnerability is CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in joncampbell123 doslib.This issue affects doslib: before doslib-20250729.
The advisory is shared for download at github.com. This vulnerability was named CVE-2026-33851 since 03/24/2026. The exploitation appears to be easy. The attack needs to be approached locally. There are neither technical details nor an exploit publicly available.
Upgrading to version 20250729 eliminates this vulnerability. Applying a patch is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.
Productinfo
Vendor
joncampbell123
Name
doslib
Version
20250729
Website
Product: https://github.com/joncampbell123/doslib/
CPE 2.3info
🔒
CPE 2.2info
🔒
CVSSv4info
VulDB Vector: 🔒
VulDB Reliability: 🔍
CVSSv3info
VulDB Meta Base Score: 6.5
VulDB Meta Temp Score: 6.4
VulDB Base Score: 5.3
VulDB Temp Score: 5.1
VulDB Vector: 🔒
VulDB Reliability: 🔍
CNA Base Score: 7.8
CNA Vector (GovTech CSG): 🔒
CVSSv2info
Vector Complexity Authentication Confidentiality Integrity Availability
Unlock Unlock Unlock Unlock Unlock Unlock
Unlock Unlock Unlock Unlock Unlock Unlock
Unlock Unlock Unlock Unlock Unlock Unlock
VulDB Base Score: 🔒
VulDB Temp Score: 🔒
VulDB Reliability: 🔍
Exploitinginfo
Class: Memory corruption
CWE: CWE-119
CAPEC: 🔒
ATT&CK: 🔒
Physical: Partially
Local: Yes
Remote: Partially
Availability: 🔒
Status: Not defined
Price Prediction: 🔍
Current Price Estimation: 🔒
0-Day Unlock Unlock Unlock Unlock
Today Unlock Unlock Unlock Unlock
Threat Intelligenceinfo
Interest: 🔍
Active Actors: 🔍
Active APT Groups: 🔍
Countermeasuresinfo
Recommended: Upgrade
Status: 🔍
0-Day Time: 🔒
Upgrade: doslib 20250729
Patch: github.com
Timelineinfo
03/24/2026 Advisory disclosed
03/24/2026 +0 days CVE reserved
03/24/2026 +0 days VulDB entry created
03/24/2026 +0 days VulDB entry last update
Sourcesinfo
Product: github.com
Advisory: github.com
Status: Confirmed
CVE: CVE-2026-33851 (🔒)
GCVE (CVE): GCVE-0-2026-33851
GCVE (VulDB): GCVE-100-352684
Entryinfo
Created: 03/24/2026 07:32
Changes: 03/24/2026 07:32 (64)
Complete: 🔍
Cache ID: 99:319:101
Discussion
No comments yet. Languages: en.
Please log in to comment.
◂ PreviousOverviewNext ▸