A stack-based buffer overflow vulnerability has been identified in FreeIPMI versions prior to 1.6.19. The flaw exists in the ipmi-oem component, specifically in the _output_dell_system_info_cmc_ipv6_info function within ipmi-oem/ipmi-oem-dell.c. The vulnerability is triggered via the cmc-ipv6-info subcommand of the dell get-system-info command. Stack-based buffer overflows can potentially allow attackers to execute arbitrary code or crash the affected application. The vulnerability has been addressed in FreeIPMI version 1.6.19, which is available for download. The fix was disclosed on the oss-security mailing list in August 2026. Users of FreeIPMI are advised to upgrade to version 1.6.19 or later to mitigate the risk.
