CorvusSKK contains a code injection vulnerability, which may lead to arbitrary code execution on the affected product.

CorvusSKK contains a code injection vulnerability, which may lead to arbitrary code execution on the affected product.

CorvusSKK provided by SASAKI Nobuyuki contains multiple vulnerabilities listed below:<a href='https://cwe.mitre.org/data/definitions/94.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/190.html' target='_blank'></a><ul><li>Code Injection (CWE-94) - CVE-2026-76148</li><li>Integer Overflow or Wraparound (CWE-190) - CVE-2026-76149</li></ul>Ryo Shimada of Powder Keg Technologies, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.