CVE-2001-1046: Qualcomm Qpopper

High severity, CVSS 10.0. EPSS: 1.9% chance of exploitation in the next 30 days.

Buffer overflow in qpopper (aka qpop or popper) 4.0 through 4.0.2 allows remote attackers to gain privileges via a long username.

Affected products

• Qualcomm Qpopper: version 4.0 only; version 4.0.1 only; version 4.0.2 only

Published 2001-06-02. Last modified 2026-06-16.