QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2026-39959

Back to search

CVE-2026-39959

Published: Apr 9, 2026

Modified: Apr 9, 2026

PUBLISHED

CVSS v3.1

7.1

HIGH

Description

Tmds.DBus provides .NET libraries for working with D-Bus from .NET. Tmds.DBus and Tmds.DBus.Protocol are vulnerable to malicious D-Bus peers. A peer on the same bus can spoof signals by impersonating the owner of a well-known name, exhaust system resources or cause file descriptor spillover by sending messages with an excessive number of Unix file descriptors, and crash the application by sending malformed message bodies that cause unhandled exceptions on the SynchronizationContext. This vulnerability is fixed in Tmds.DBus 0.92.0 and Tmds.DBus.Protocol 0.92.0 and 0.21.3.

VendorProductVersions

tmds

Tmds.DBus

affected
< 0.92.0

tmds

Tmds.DBus.Protocol

affected
< 0.21.3
affected
>= 0.22.0, < 0.92.0

Weaknesses (CWE)

CWE-770
CWE-290

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

High

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now