Executive brief
BusyBox romfs volume ID parsing uses unbounded strlen on attacker-controlled metadata, causing a heap buffer overflow when processing crafted filesystem images.
Junglewise Threat Intelligence
CVE-2026-88832: BusyBox romfs volume ID parsing uses unbounded strlen on attacker-controlled metadata, causing a heap buffer overflow when processing crafte
CVE-2026-88832 · Severity: high · CVSS 7.3 · Published 2026-09-23