Detections
Analytics
CVE-2026-49416
high
Description
A design error vulnerability has been identified in FreeBSD. This issue occurs due to improper validation of the requested history size in the CONS_HISTORY ioctl handler. A large input value can cause an integer overflow during buffer size calculation, leading to a heap allocation smaller than required and resulting in out-of-bounds write during buffer initialization.