Bug 2551007 (CVE-2026-70197)

Summary:	CVE-2026-70197 dotnet: dotnet: Arbitrary code execution via out-of-bounds write
Product:	[Other] Security Response	Reporter:	OSIDB Bzimport <bzimport>
Component:	vulnerability	Assignee:	Product Security DevOps Team <prodsec-dev>
Status:	NEW ---	QA Contact:
Severity:	high	Docs Contact:
Priority:	high
Version:	unspecified	Keywords:	Security
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	---
Doc Text:	A flaw was found in .NET. An out-of-bounds write vulnerability allows an unauthenticated remote attacker to execute arbitrary code over the network. By sending specially crafted input to an affected application, an attacker can corrupt system memory and compromise the host environment.	Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description OSIDB Bzimport 2026-10-13 19:49:19 UTC

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

Affected products:
- .NET Runtime Libraries (release 10.0): 10.0.0 - 10.0.12; fixed 10.0.13
- .NET Runtime Libraries (release 11.0): 11.0.0-preview.1 - 11.0.0-rc.1; fixed 11.0.0-rc.2
- .NET Runtime Libraries (release 9.0): 9.0.0 - 9.0.20; fixed 9.0.21
- .NET Runtime Libraries (release 8.0): 8.0.0 - 8.0.31; fixed 8.0.32