What is CVE-2026-4010?

CVE-2026-4010 is a low-severity vulnerability in Thakeenathees Pocketlang, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 3.3/10. Published 2026-03-12.

How severe is CVE-2026-4010?

Low severity. CVSS v3 base score is 3.3 out of 10.

Buffer overflow in Thakeenathees Pocketlang

CVE-2026-4010

A vulnerability was found in ThakeeNathees pocketlang up to cc73ca61b113d48ee130d837a7a8b145e41de5ce. The affected element is the function pkByteBufferAddString. The manipulation of the argument length with the input 4294967290 results in…

Vulnerability class: Buffer Overflow

EPSS: 0.000 (6.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L.

Affected products

Thakeenathees Pocketlang — versions cc73ca61b113d48ee130d837a7a8b145e41de5ce

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

VDB-350533 | ThakeeNathees pocketlang pkByteBufferAddString memory corruption (technical-description, vdb-entry)
VDB-350533 | CTI Indicators (IOB, IOC, IOA) (signature, permissions-required)
Submit #769773 | ThakeeNathees pocketlang master-branch Integer Overflow (third-party-advisory)
cna@vuldb.com (issue-tracking, exploit)
cna@vuldb.com (exploit)
cna@vuldb.com (product, exploit)

Frequently asked questions

What is CVE-2026-4010?: CVE-2026-4010 is a low-severity vulnerability in Thakeenathees Pocketlang, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 3.3/10. Published 2026-03-12.
How severe is CVE-2026-4010?: Low severity. CVSS v3 base score is 3.3 out of 10.