CVE-2026-40031

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-40031
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-40031.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-40031
Published
2026-04-08T21:35:26.293Z
Modified
2026-08-12T16:24:01.752006Z
Severity
  • 8.5 (High) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
MemProcFS < 5.17 DLL/Shared Library Hijacking
Details

MemProcFS before 5.17 contains multiple unsafe library-loading patterns that enable DLL and shared-library hijacking across six attack surfaces, including bare-name LoadLibraryU and dlopen calls without path qualification for vmmpyc, libMSCompression, and plugin DLLs. An attacker who places a malicious DLL or shared library in the working directory or manipulates LDLIBRARYPATH can achieve arbitrary code execution when MemProcFS loads.

Database specific 
{
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "last_affected": "5.16.12"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "5.16.12"
                }
            ]
        }
    ],
    "cwe_ids": [
        "CWE-427"
    ],
    "cna_assigner": "VulnCheck",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/40xxx/CVE-2026-40031.json"
}
References

Affected packages

Git / github.com/ufrisk/memprocfs

Affected ranges

Type
GIT
Repo
https://github.com/ufrisk/memprocfs
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
8304ca9ab9f87fff2986fe1fa2fbd0dbb4b83cd9
Fixed
df80e6e83641f5004025ce661e6dd8139028d7b5
Database specific
Show details 
{
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ],
    "cpe": "cpe:2.3:a:ufrisk:memprocfs:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "5.17"
        }
    ]
}

Affected versions

v1.*
v1.0
v1.1
v1.2
v2.*
v2.0
v2.10
v2.2
v2.3
v2.4
v2.5
v2.6
v2.7
v2.7.1
v2.7.2
v2.8
v2.9
v3.*
v3.0
v3.1
v3.10
v3.2
v3.3
v3.4
v3.5
v3.6
v3.7
v3.8
v3.9
v4.*
v4.0
v4.1
v4.2
v4.3
v4.4
v4.5
v4.6
v4.7
v4.8
v4.9
v5.*
v5.0
v5.1
v5.10
v5.11
v5.12
v5.13
v5.14
v5.15
v5.16
v5.2
v5.3
v5.4
v5.5
v5.6
v5.7
v5.8
v5.9
Other
v5_archive

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-40031.json"
vanir_signatures 
[
    {
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "151393241912488512631563710406937767127",
                "87225129130387968107017609946739413711",
                "90295702535448991552561081025548485264",
                "83992010747992258168074900978924130638"
            ]
        },
        "target": {
            "file": "vmm/vmmwinobj.c"
        },
        "source": "https://github.com/ufrisk/memprocfs/commit/8304ca9ab9f87fff2986fe1fa2fbd0dbb4b83cd9",
        "signature_version": "v1",
        "id": "CVE-2026-40031-0b71a1c3",
        "deprecated": false
    },
    {
        "signature_type": "Function",
        "digest": {
            "function_hash": "311317006559087206091107529961468485768",
            "length": 1269.0
        },
        "target": {
            "function": "OSCOMPAT_RtlDecompressBufferEx",
            "file": "vmm/oscompatibility.c"
        },
        "source": "https://github.com/ufrisk/memprocfs/commit/df80e6e83641f5004025ce661e6dd8139028d7b5",
        "signature_version": "v1",
        "id": "CVE-2026-40031-2e6a22c0",
        "deprecated": false
    },
    {
        "signature_type": "Function",
        "digest": {
            "function_hash": "39123112157176309361393514664386518546",
            "length": 832.0
        },
        "target": {
            "function": "OSCOMPAT_RtlDecompressBuffer",
            "file": "vmm/oscompatibility.c"
        },
        "source": "https://github.com/ufrisk/memprocfs/commit/df80e6e83641f5004025ce661e6dd8139028d7b5",
        "signature_version": "v1",
        "id": "CVE-2026-40031-3780e558",
        "deprecated": false
    },
    {
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "35521358553768952720678758614305740609",
                "224401721515607354365733338271450621863",
                "271075020953694778185647282719932344734",
                "199815784020392011867686791525136045511",
                "15574377259949940936125519600297755720",
                "322705243018970172074645911822165190802",
                "133044951223973635755568936999426436937",
                "12972881846934190820899034677882476449",
                "251471349105620192832261645629340533887",
                "188939632803728303635781057556282128542",
                "243922171491113244717409056146397055839",
                "36198501454709816268685477862201682771",
                "330873253907343009917796368844053726746",
                "201377629277499326351103849257236464416",
                "337192455038197634921257887116181264973",
                "173305020980062228165420147656779843013",
                "176439571777730674160644407604560443923",
                "111322239112726016362404770403055891072",
                "217451051327277105763354275482833176938",
                "18702697456142323170562948361095041048",
                "22561650419718077722473185539709321154",
                "207799876757685881576170996187453352643",
                "215754024290090068481383244082225435501",
                "216021012219897330295513924443285175399",
                "71245322827123648325880913525512098750",
                "255748471796024558554445049879659343624",
                "204889024130488942504972855079734002213",
                "134898288535468298050629203915238260403",
                "93262994509548652288615304847981291092",
                "19767331662496052486550532670589134270",
                "22561650419718077722473185539709321154",
                "182649814834680399725412927642770731531",
                "331633239625918384303725686015167909208",
                "288452115974627318783952638229074072993",
                "223987028162699311251354275811814824992",
                "171001731671644504475797526376039893211",
                "147373982662002507622786223495038601308",
                "330873253907343009917796368844053726746",
                "201377629277499326351103849257236464416",
                "9324747316238357598578143217940754553",
                "87343861359956826822255764439258481568",
                "261962012334892377666615473467024278434",
                "63315311828743525462361056050087210051",
                "192654134327941775410886201504599106195",
                "16074610631134872083648892747972632453",
                "22561650419718077722473185539709321154",
                "330537483400181621569310417817560608602",
                "308463927850668354885030198967718104900",
                "30294474199670713620829468881243622350",
                "93428639605621316895250314926696862057",
                "9324747316238357598578143217940754553",
                "123595037339992744213393129466451208200",
                "42087489826719824275425158806942157617",
                "240534382950191016034496361041491254828",
                "71320659849860469073529923231754305981",
                "325593271936874427608117991139886865808",
                "105547387904084784080361693428720418146",
                "3180104792452286454975060186291230629",
                "291853247335001256807104856457221513469",
                "125137761735317126486614585454485816577",
                "229351886713810300206634722184335119590",
                "133112133120766204554437095405267508609",
                "257783705285798420552176636398859287556",
                "177517179024634379342442497747578472480",
                "205992223189143685394166231385842862833",
                "69419058343043820789524749529467451868",
                "332703748896196154275372248467721048637",
                "242122796910053777635410874076694471774",
                "178162281703966469842292800067975730886",
                "91170156056620384100433120939781168991",
                "233138671552582848838508792180978991305",
                "198896538537873240144657521660882065463",
                "198779898090814237438992889802995950779",
                "227482967409713883786423341855970506231",
                "235679765900670205676446903598928040613",
                "322705243018970172074645911822165190802",
                "133044951223973635755568936999426436937",
                "12972881846934190820899034677882476449",
                "138871144255003116317659837853042458502",
                "188085153194185504704643415998106471417",
                "135702782002014652592381840559037957761",
                "321526026900384260986322392829862226688",
                "85829883278483367758054772671214453145",
                "234326026650429101941526961184705677671",
                "290738598912996830036096905503737111958",
                "284954800106352448005875179223238249426",
                "74455762201979061104885196768600118140",
                "206863027014019369791664909853881089542",
                "59715340490921854397348027849361379186",
                "18702697456142323170562948361095041048",
                "22561650419718077722473185539709321154",
                "207799876757685881576170996187453352643",
                "215754024290090068481383244082225435501",
                "175256193879846094956885733208076751640",
                "83488681888856623300511458418611940803",
                "256437020299821699856746665180146188564",
                "196140497675755870112818633325331862843",
                "134898288535468298050629203915238260403",
                "93262994509548652288615304847981291092",
                "19767331662496052486550532670589134270",
                "22561650419718077722473185539709321154",
                "182649814834680399725412927642770731531",
                "1322216753515487305948452831099988745",
                "177302159051981319684077138950474081316",
                "308386939353448003221222304744789107367",
                "33944291269801039495352201474399054492",
                "64559838190924980482105843202767991236",
                "85829883278483367758054772671214453145",
                "298615986910199943322404881758864204621",
                "76758914664741870556557502463623432952",
                "202316823518240346704010369073156249461",
                "275608295788557627277830743252467077276",
                "45701422978316527816647484255873833955",
                "39736902933737009718851352366746478868",
                "22561650419718077722473185539709321154",
                "244998193806923941543950418102840568963",
                "263235722321187701804481086608690662415",
                "230020450796041900876536973151052417665",
                "332877625787435613305891342784460426207",
                "227323295508051993867976602294115174867",
                "42087489826719824275425158806942157617",
                "240534382950191016034496361041491254828",
                "71320659849860469073529923231754305981",
                "301035550400823975588117617121236783129",
                "339086037565194911899342146752794464946",
                "272433576787322167938704513992748406702",
                "330216180021042406024527154799210573895",
                "128018868168698960403448582473475119929",
                "19302477745129606708107183375500856584",
                "200132032042586445302903457158347923727",
                "79081776234686737872651503344533586342"
            ]
        },
        "target": {
            "file": "vmm/pluginmanager.c"
        },
        "source": "https://github.com/ufrisk/memprocfs/commit/df80e6e83641f5004025ce661e6dd8139028d7b5",
        "signature_version": "v1",
        "id": "CVE-2026-40031-3b84702b",
        "deprecated": false
    },
    {
        "signature_type": "Function",
        "digest": {
            "function_hash": "123633237182147386660955229934866231283",
            "length": 3640.0
        },
        "target": {
            "function": "PluginManager_Initialize_Python",
            "file": "vmm/pluginmanager.c"
        },
        "source": "https://github.com/ufrisk/memprocfs/commit/df80e6e83641f5004025ce661e6dd8139028d7b5",
        "signature_version": "v1",
        "id": "CVE-2026-40031-4f4323a3",
        "deprecated": false
    },
    {
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "204004689122759879345964449384385131258",
                "281385491631206221192541403263331638927",
                "122141885761939813581785622654582378074",
                "122649645625481889030871991357432398194",
                "215889700502332600491359509433108345751",
                "51729577698688821855310031242800281026",
                "18743053691977441265469105837195567590",
                "245507364709047748057590440335803949842",
                "307659593233853909492719179267949327284",
                "325388451337068861666973790931033158741",
                "130626606347992912170332716872994275072",
                "176680819057073612406051655195977001399",
                "61019725533392808655832407360942223858"
            ]
        },
        "target": {
            "file": "vmm/util.c"
        },
        "source": "https://github.com/ufrisk/memprocfs/commit/df80e6e83641f5004025ce661e6dd8139028d7b5",
        "signature_version": "v1",
        "id": "CVE-2026-40031-90f0be93",
        "deprecated": false
    },
    {
        "signature_type": "Function",
        "digest": {
            "function_hash": "239465115976990286511535856233153544650",
            "length": 3405.0
        },
        "target": {
            "function": "PluginManager_Initialize_Python",
            "file": "vmm/pluginmanager.c"
        },
        "source": "https://github.com/ufrisk/memprocfs/commit/df80e6e83641f5004025ce661e6dd8139028d7b5",
        "signature_version": "v1",
        "id": "CVE-2026-40031-a7a0c3f5",
        "deprecated": false
    },
    {
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "247746867023746688998938875928415930633",
                "248366280956672061777807475662428150014",
                "130739658782461447258147030836868167090",
                "148447196743866236838422484507418565881"
            ]
        },
        "target": {
            "file": "vmm/vmm.h"
        },
        "source": "https://github.com/ufrisk/memprocfs/commit/df80e6e83641f5004025ce661e6dd8139028d7b5",
        "signature_version": "v1",
        "id": "CVE-2026-40031-cb10b0ca",
        "deprecated": false
    },
    {
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "21970673180302246670560587305503633335",
                "202945215857115287168723482007391077997",
                "96109729314087832155917923782342641331",
                "320684593798319672056567067317853375723"
            ]
        },
        "target": {
            "file": "vmm/vmmdll_core.c"
        },
        "source": "https://github.com/ufrisk/memprocfs/commit/df80e6e83641f5004025ce661e6dd8139028d7b5",
        "signature_version": "v1",
        "id": "CVE-2026-40031-d0e3c360",
        "deprecated": false
    },
    {
        "signature_type": "Function",
        "digest": {
            "function_hash": "4365135734470398217358600238968054254",
            "length": 1536.0
        },
        "target": {
            "function": "PluginManager_Initialize_ExternalDlls",
            "file": "vmm/pluginmanager.c"
        },
        "source": "https://github.com/ufrisk/memprocfs/commit/df80e6e83641f5004025ce661e6dd8139028d7b5",
        "signature_version": "v1",
        "id": "CVE-2026-40031-e5773c59",
        "deprecated": false
    },
    {
        "signature_type": "Function",
        "digest": {
            "function_hash": "96174598803566338329509684675137043967",
            "length": 214.0
        },
        "target": {
            "function": "LoadLibraryU",
            "file": "vmm/oscompatibility.c"
        },
        "source": "https://github.com/ufrisk/memprocfs/commit/df80e6e83641f5004025ce661e6dd8139028d7b5",
        "signature_version": "v1",
        "id": "CVE-2026-40031-e8a4e17e",
        "deprecated": false
    },
    {
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "297311070961180782357496149927541209018",
                "192436026861361885733493271726854726253",
                "230339081213678192648366110036953001944",
                "176285574795335970781289849134279381745",
                "173689480987463919222033592960792786700",
                "282278665456802897969415006727486482534",
                "139082400162504621535669376757807894163",
                "159260070271510741146058807238850318831",
                "76788040099165473248175658034911497511",
                "277931914430694995643635755215347535991",
                "7830529476561513084978942456618721016",
                "190149050689676238096114762737414218384",
                "173689480987463919222033592960792786700",
                "282278665456802897969415006727486482534",
                "139082400162504621535669376757807894163",
                "159260070271510741146058807238850318831",
                "158637829219078600495927304232791487383",
                "267667544577734639395519213870731863859",
                "122360029652846533185326659640112183134",
                "329004134782363185542307008110866315714",
                "266201237221838832740022390992152436412",
                "227855261653713509684711117296574013319",
                "37945130427190746060024226819326822357",
                "309359486555104246925116315727174741041",
                "39915927328846207326540692988064464501",
                "175904008621849644249773064684315715901",
                "84126534946016578305897452300597816551"
            ]
        },
        "target": {
            "file": "vmm/oscompatibility.c"
        },
        "source": "https://github.com/ufrisk/memprocfs/commit/df80e6e83641f5004025ce661e6dd8139028d7b5",
        "signature_version": "v1",
        "id": "CVE-2026-40031-f4308e31",
        "deprecated": false
    }
]
vanir_signatures_modified 
"2026-08-12T16:24:01Z"