CVE-2010-2891: Tu-Braunschweig Libsmi

High severity, CVSS 7.5. EPSS: 14% chance of exploitation in the next 30 days.

Buffer overflow in the smiGetNode function in lib/smi.c in libsmi 0.4.8 allows context-dependent attackers to execute arbitrary code via an Object Identifier (aka OID) represented as a numerical string containing many components separated by . (dot) characters.

Affected products

Published 2010-10-28. Last modified 2026-06-16.