vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-69150

KeePassXC: Heap use-after-free in KeePass1 (KDB) importer via unpruned m_entryUuids map

MEDIUM
4.3
CVSS Score
Published: October 13, 2026 at 03:23 PM UTC
Updated: October 16, 2026 at 08:02 PM UTC
1 product affected across 1 vendorKeepassxc

Using keepassxc by keepassxreboot?

Get instant alerts when new vulnerabilities affect keepassxc - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM4.3
Exploit prediction
EPSS 0.1%
SSVC
No known exploit

Description

KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. Prior to 2.8.0-beta1, KeePass1 / KDB legacy import retains raw Entry pointers in m_entryUuids after deleting metastream entries. When a crafted, unlockable .kdb file contains an earlier metastream entry followed by a KPX_CUSTOM_ICONS_4 metastream that references the earlier UUID, parseCustomIcons4() calls Entry::setIcon through the stale pointer, causing a heap use-after-free with a controlled write and a reliable process crash. This issue is fixed in version 2.8.0-beta1.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Keepassxc· Keepassxreboot
90%
v < 2.8.0-beta1

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (3)

x_refsource_CONFIRM
Source: cverecord
https://github.com/keepassxreboot/keepassxc/security/advisories/GHSA-4642-49vv-4p43
x_refsource_MISC
Source: cverecord
https://github.com/keepassxreboot/keepassxc/commit/6a534f38c61295d60b0e937739a12511e76dbfeb
x_refsource_MISC
Source: cverecord
https://github.com/keepassxreboot/keepassxc/releases/tag/2.8.0-beta1

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

4.3MEDIUMGitHub_M
Vector?

Quick Info

StatusAWAITING ANALYSIS
CWE
CWE-416

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card