CVE-2026-68353: Software Security Vulnerability Vulnerability

HIGH
Advisory Identifier: GHSA-2244-8pcv-8jr6
Share
CVSS 8.1
CWE-125
Published
Advisory Summary

CVE-2026-68353 is a HIGH (CVSS 8.1) security vulnerability vulnerability (CWE-125: Out-of-bounds Read) affecting Software libraries in the Maven ecosystem. The weakness occurs when the product reads data past the end, or before the beginning, of the intended buffer.. Remediation is available in the latest vendor maintenance releases.

CVE-2026-68353 at a Glance

CVE Identifier CVE-2026-68353
GHSA Identifier GHSA-2244-8pcv-8jr6
Severity HIGH
CVSS v3.1 Base Score 8.1
CWE Classification CWE-125: Out-of-bounds Read
Affected Product Software
Package Ecosystem Maven
Published Date
Last Updated

Security Impact

CVSS: 8.1

The security impact metrics below are parsed directly from the CVSS v3.1 vector string (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H).

Attack Vector Adjacent (AV:A)
Attack Complexity Low (AC:L)
Privileges Required None (PR:N)
User Interaction None (UI:N)
Scope Unchanged (S:U)
Confidentiality High (C:H)
Integrity None (I:N)
Availability High (A:H)

How to Fix CVE-2026-68353

To remediate this vulnerability, upgrade all affected Software dependencies to a patched release. Both direct and transitive dependencies should be checked, as frameworks or security libraries may pull in vulnerable versions transitively.

Verify Direct and Transitive Dependencies

Run the following command in your project directory to verify that all resolved dependencies use the patched release: 

mvn dependency:tree

How to Check if You Are Affected

To determine whether your Java application is affected by CVE-2026-68353, inspect your build dependencies using the Maven Dependency Plugin:

mvn dependency:tree

Analyze the terminal output to locate any version of Software in your dependency tree. If any resolved version matches the vulnerable ranges listed in the table below (for example, versions earlier than the patched release), your application is affected.

Note: The mvn dependency:tree command inspects the resolved dependency graph declared in your project's POM files; it does not perform automated security scanning or inspect runtime dynamic classpaths. Always verify runtime container classpaths and shaded JARs.

Technical Details

Vulnerability Mechanism & Technical Analysis

This vulnerability is classified under CWE-125: Out-of-bounds Read, where the product reads data past the end, or before the beginning, of the intended buffer. In Software, software state validation or input boundaries are circumvented during processing. Review the official source advisory statement below for specific affected components, classes, and reproduction details.

Source Advisory Statement

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler The firmware-controlled num_msg field (u8, 0-255) drives the loop in ath6kl_wmi_tx_complete_event_rx() without validation against the buffer length. This allows out-of-bounds reads of up to 1020 bytes past the WMI event buffer when the firmware sends an inflated num_msg. Add a check that the buffer is large enough to hold the fixed struct and the num_msg variable-length entries.

References

NVD — CVE-2026-68353 NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-68353
git.kernel.org/stable/c/0e0fc04af9... WEB
https://git.kernel.org/stable/c/0e0fc04af9b443c6b425f00fb604ff599bc80d1d
git.kernel.org/stable/c/289edc3c71... WEB
https://git.kernel.org/stable/c/289edc3c71344b89e6522891147cfb8f61b088bb
git.kernel.org/stable/c/35196a0760... WEB
https://git.kernel.org/stable/c/35196a07603f8c94a4943093bc26d5b5826285f8
git.kernel.org/stable/c/3a21c89215... WEB
https://git.kernel.org/stable/c/3a21c89215cc18f1a97c5e5bfd1da6d4f3d44495
git.kernel.org/stable/c/5297299c3f... WEB
https://git.kernel.org/stable/c/5297299c3fa6133275db0be99d69cd759b6cbfe9
git.kernel.org/stable/c/69ac7ba3a3... WEB
https://git.kernel.org/stable/c/69ac7ba3a3df6654e7daa82674575a8c4a1a63ea
git.kernel.org/stable/c/c38b0d5c66... WEB
https://git.kernel.org/stable/c/c38b0d5c661951b5dd082bdf31f8a57a0ce6e540
git.kernel.org/stable/c/eb636fbc44... WEB
https://git.kernel.org/stable/c/eb636fbc443149b3501c3f97e26225ddcb314a0f

Frequently Asked Questions

What is CVE-2026-68353?
CVE-2026-68353 is a security vulnerability in Software classified as a security vulnerability vulnerability under CWE-125: Out-of-bounds Read.
Which Software versions are affected?
Affected versions include releases prior to current release patches.
What version fixes CVE-2026-68353?
Upgrading to current release patches (or the latest patched release for your respective branch) resolves the vulnerability.
What is the CVSS score of CVE-2026-68353?
CVE-2026-68353 has a CVSS v3.1 base score of 8.1 (HIGH) with vector string CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H.
What CWE is associated with CVE-2026-68353?
CVE-2026-68353 is classified under CWE-125: Out-of-bounds Read (The product reads data past the end, or before the beginning, of the intended buffer.).
How can I check Maven dependencies for CVE-2026-68353?
Run the dependency tree command: 'mvn dependency:tree'. This command lists direct and transitive dependencies in your build configuration so you can verify if a vulnerable version is resolved.
Machine-readable OSV JSON OSV v1.5 Schema
Normalized schema output
View Raw JSON 
{
  "schema_version" : "1.4.0",
  "id" : "GHSA-2244-8pcv-8jr6",
  "modified" : "2026-08-19T18:32:16Z",
  "published" : "2026-08-10T15:33:48Z",
  "aliases" : [ "CVE-2026-68353" ],
  "details" : "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler\n\nThe firmware-controlled num_msg field (u8, 0-255) drives the loop in\nath6kl_wmi_tx_complete_event_rx() without validation against the buffer\nlength. This allows out-of-bounds reads of up to 1020 bytes past the\nWMI event buffer when the firmware sends an inflated num_msg.\n\nAdd a check that the buffer is large enough to hold the fixed struct\nand the num_msg variable-length entries.",
  "severity" : [ {
    "type" : "CVSS_V3",
    "score" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H"
  } ],
  "affected" : [ ],
  "references" : [ {
    "type" : "ADVISORY",
    "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-68353"
  }, {
    "type" : "WEB",
    "url" : "https://git.kernel.org/stable/c/0e0fc04af9b443c6b425f00fb604ff599bc80d1d"
  }, {
    "type" : "WEB",
    "url" : "https://git.kernel.org/stable/c/289edc3c71344b89e6522891147cfb8f61b088bb"
  }, {
    "type" : "WEB",
    "url" : "https://git.kernel.org/stable/c/35196a07603f8c94a4943093bc26d5b5826285f8"
  }, {
    "type" : "WEB",
    "url" : "https://git.kernel.org/stable/c/3a21c89215cc18f1a97c5e5bfd1da6d4f3d44495"
  }, {
    "type" : "WEB",
    "url" : "https://git.kernel.org/stable/c/5297299c3fa6133275db0be99d69cd759b6cbfe9"
  }, {
    "type" : "WEB",
    "url" : "https://git.kernel.org/stable/c/69ac7ba3a3df6654e7daa82674575a8c4a1a63ea"
  }, {
    "type" : "WEB",
    "url" : "https://git.kernel.org/stable/c/c38b0d5c661951b5dd082bdf31f8a57a0ce6e540"
  }, {
    "type" : "WEB",
    "url" : "https://git.kernel.org/stable/c/eb636fbc443149b3501c3f97e26225ddcb314a0f"
  } ],
  "database_specific" : {
    "cwe_ids" : [ "CWE-125" ],
    "severity" : "HIGH",
    "github_reviewed" : false,
    "github_reviewed_at" : null,
    "nvd_published_at" : "2026-08-10T13:20:27Z"
  }
}