CVE-2026-55246

Published 15 October 2026 · tracked since 16 October 2026

Description

bincookie is a header-only binarycookies parser. Prior to 0.1.9, bincookie_init_file() in bincookie.h allocates a buffer using the actual .binarycookies file length but trusts the file-controlled num_pages field as the loop bound for byte-swapping page_sizes entries. A crafted file can make the loop

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-111138 MEDIUM 5.5
• CVE-2026-110874 MEDIUM 6.6
• CVE-2026-110878 MEDIUM 5.4
• CVE-2026-109924 MEDIUM 5.9
• CVE-2026-109932 MEDIUM 5.9
• CVE-2026-109829 HIGH 7.4
• CVE-2026-109841 MEDIUM 5.9
• CVE-2026-109869 HIGH 7.5
• CVE-2026-109383 HIGH 7.4
• CVE-2026-104150

→ Open the live CVE board · all tools