CVE-2026-12386 - Vulnerability Details - OpenCVE

Improper null termination vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Overflow Buffers. This issue affects Pardus Pen: from <=4.1.5 before 4.2.1.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact Low

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

No data.

References

Link	Providers
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0499

History

Sun, 05 Jul 2026 14:45:00 +0000

Type	Values Removed	Values Added
Description		Improper null termination vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Overflow Buffers. This issue affects Pardus Pen: from <=4.1.5 before 4.2.1.
Title		Buffer Overflow in TUBITAK BILGEM's Pardus Pen
Weaknesses		CWE-170
References		https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0499
Metrics		cvssV3_1 `{'score': 3.9, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L'}`

MITRE

Status: PUBLISHED

Assigner: TR-CERT

Published: 2026-07-05T14:31:47.467Z

Updated: 2026-07-05T14:31:47.467Z

Reserved: 2026-06-16T11:12:47.226Z

Link: CVE-2026-12386

Vulnrichment

No data.

NVD

No data.

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-12386", "assignerOrgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "state": "PUBLISHED", "assignerShortName": "TR-CERT", "dateReserved": "2026-06-16T11:12:47.226Z", "datePublished": "2026-07-05T14:31:47.467Z", "dateUpdated": "2026-07-05T14:31:47.467Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "shortName": "TR-CERT", "dateUpdated": "2026-07-05T14:31:47.467Z"}, "title": "Buffer Overflow in TUBITAK BILGEM's Pardus Pen", "datePublic": "2026-07-05T14:28:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-170", "description": "CWE-170 Improper null termination", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-100", "descriptions": [{"lang": "en", "value": "CAPEC-100 Overflow Buffers"}]}], "affected": [{"vendor": "TUBITAK BILGEM Software Technologies Research Institute", "product": "Pardus Pen", "versions": [{"status": "affected", "version": "<=4.1.5", "lessThan": "4.2.1", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Improper null termination vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Overflow Buffers.\n\nThis issue affects Pardus Pen: from <=4.1.5 before 4.2.1.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Improper null termination vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Overflow Buffers.<p>This issue affects Pardus Pen: from <=4.1.5 before 4.2.1.</p>"}]}], "references": [{"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0499", "tags": ["government-resource"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "LOW", "baseSeverity": "LOW", "baseScore": 3.9, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L"}}], "credits": [{"lang": "en", "value": "Muhammed KAYA", "type": "finder"}], "source": {"defect": ["TR-26-0499"], "advisory": "TR-26-0499", "discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.2"}}}}