VulnWatch VulnWatch
← Back to dashboard
Low nvd · CVE-2026-88842

CVE-2026-88842: A flaw was found in BusyBox dpkg. The write_status_file() function does not reset a field cursor between package stanzas

Published Oct 14, 2026 CVSS 3.3

A flaw was found in BusyBox dpkg. The write_status_file() function does not reset a field cursor between package stanzas. When two packages are removed in a single invocation and the first stanza is larger than the second, the second package stanza can be dropped from the status file, causing limited data corruption.

Affected AI Products

cursor
Get the weekly digest. Every Monday: top AI security stories of the week. Free.