Log in Start free

Vulnerability · Published Feb 6, 2026 · Assigned by VulDB

CVE-2026-2016happyfish100 libfastcommon base64.c base64_decode stack-based overflow

Medium 5.3

In plain English

A medium-severity stack buffer overflow in libfastcommon from happyfish100. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.3%top 78.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A security vulnerability has been detected in happyfish100 libfastcommon up to 1.0.84. Affected by this vulnerability is the function base64_decode of the file src/base64.c. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used. The identifier of the patch is 82f66af3e252e3e137dba0c3891570f085e79adf. Applying a patch is the recommended action to fix this issue.

Affected products (as reported)

VendorProductVersions
happyfish100 libfastcommon 1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.7

Weakness: CWE-121, CWE-119 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C

References