CVE-2026-70457

rsync 3.2.3 before 3.5.0 contains an out-of-bounds write in parse_size_arg() where the return value of snprintf() is used directly as an index into a .bss-segment array without bounds checking. When snprintf truncates the formatted size string, the return value equals the number of characters that would have been written including the truncated portion, and this value may exceed the array length. The subsequent indexed write targets memory outside the intended array bounds, corrupting .bss memory.

• CWE-131
• CWE-787

• https://github.com/RsyncProject/rsync/releases/tag/v3.5.0Product, Release Notes
• https://github.com/RsyncProject/rsync/security/advisories/GHSA-pg7g-xqmr-xpfhVendor Advisory
• https://www.vulncheck.com/advisories/rsync-out-of-bounds-write-via-parse-size-argRelease Notes, Third Party Advisory

Published

Aug 13, 2026

Last Modified

Aug 31, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-7045A vulnerability was determined in baomidou dynamic-datasourc…6.3
• CVE-2026-70452rsync 3.1.0 before 3.5.0 contains an access control bypass v…7.4
• CVE-2026-70453rsync before 3.5.0 contains an algorithmic complexity vulner…7.5
• CVE-2026-70454rsync 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl throu…8
• CVE-2026-70455rsync 3.4.2 before 3.5.0 contains a denial of service vulner…7.5
• CVE-2026-70456rsync 3.0.1 before 3.5.0 contains an out-of-bounds write vul…8.2
• CVE-2026-70458rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vul…8.2
• CVE-2026-70459rsync 3.0.0 before 3.5.0 contains a null pointer dereference…5.3
• CVE-2026-7046The NEX-Forms – Ultimate Forms Plugin for WordPress plugin f…4.9
• CVE-2026-70460rsync 2.3.3 before 3.5.0 contains a path traversal vulnerabi…8.1
• CVE-2026-70461rsync 3.2.5 before 3.5.0 contains a heap out-of-bounds write…8.2
• CVE-2026-70462rsync 3.1.0 before 3.5.0 contains a signed integer overflow …6.5