Approved changes feed: RSS · Atom
cpe:2.3:a:tatsh:bincookie:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Tatsh (b65399c6-32c9-5f47-91f7-f9cc2f1dc5ef) |
|---|---|
| Product | Bincookie (8e5b7864-b3c9-5c28-8807-a1047a58d8f0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-55246 |
vulnerable | 2026-11-03 10:16:33.397780 |
bincookie: Heap buffer overflow via unvalidated `num_pages` when parsing a `.binarycookies` file
HIGH (7.8)
bincookie is a header-only binarycookies parser. Prior to 0.1.9, bincookie_init_file() in bincookie.h allocates a buffer using the actual .binarycookies file length but trusts the file-controlled num_pages field as the loop bound for byte-swapping page_sizes entries. A crafted file can make the loop read and write beyond the heap allocation, and related unvalidated page sizes and cookie_offsets can drive additional out-of-bounds accesses in page and cookie iteration. Applications that parse an attacker-supplied binarycookies file may crash or suffer heap corruption that can potentially enable code execution. This issue is fixed in version 0.1.9.
Published: 2026-10-15T17:06:59.783Z
Updated: 2026-10-15T18:27:40.897Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.