TI-2026-83849 CVE-2026-120457 · GHSA-6vjr-59w2-48mgOut-of-bounds read in libaec second extension decoderPriority MEDIUM 59libaec through 1.1.7 contains an out-of-bounds read vulnerability in m_se_decode() in src/decode.c that allows attackers to bypass a signed bounds check via an overlong fundamental sequence.CVSS 4.0MEDIUM 5.8· Local · No auth · User interaction · EPSS 0.0024 · Published 2026-11-02 · Fix deferred CWE-196