AIKIDO-2026-948612
pageant is vulnerable to Out-of-Bounds Read
62
Medium Risk
This Affects:
pageantTL;DR
The MemoryMap::read function in pageant copies a length taken from untrusted shared memory without checking that it stays within the 8192-byte mapped region. A local process impersonating a Pageant agent on Windows can supply an oversized u32 length prefix, causing an out-of-bounds read past the buffer and an allocation of up to roughly 4 GiB that can crash the process or disclose adjacent memory. The fix checks the requested length against the map size before copying.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and you use the pageant agent client on Windows.
Background info
pageant is vulnerable to Out-of-Bounds Read in versions 0.0.1 - 0.2.2.
How to fix this
Upgrade the pageant library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.