TI-2026-84187 Aliases CVE-2026-118448 GHSA-9w8f-4c2r-vh34

Uninitialized output buffer returned after nd_to_text failure in pybddisasm

LOW 29CWE-457Published 2026-11-03 · Updated 2026-11-03

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Attack requirements: None
Impact type: —
Confidentiality · integrity · availability: Low · None · High
Fix status: No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

The pybddisasm Python bindings from Bitdefender through 0.3.0 use uninitialized memory in nd_to_text. When the underlying text conversion fails, including failures caused by invalid parameters, the output buffer may remain uninitialized yet still be converted into a Python return value (CWE-457). A local user with low privileges can trigger this when an application invokes nd_to_text in a way that makes conversion fail and then uses the result, which may disclose residual process memory or crash the Python process. The pybddisasm package is no longer maintained.

Written with Claude Haiku 5.5 from the sources below · 2026-11-03

Description from the CNA

A use of uninitialized memory vulnerability in the pybddisasm Python bindings affects nd_to_text. If the underlying text conversion fails, including failures caused by invalid parameters, the output buffer may remain uninitialized while still being converted into a Python return value. This may disclose residual process memory or cause the Python process to crash. Exploitation requires an application to invoke nd_to_text in a way that causes conversion to fail and to return or otherwise use the resulting output. The pybddisasm package is no longer maintained.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00105 1st percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Bitdefender	pybddisasm	up to 0.3.0	—	No fix listed	CNA

pybddisasm VendorBitdefender Affected up to 0.3.0 Fixed in — No fix listed CNA

Remediation

The sources list no fixed version for pybddisasm.

Written with Claude Haiku 5.5 from the sources below · 2026-11-03

Timeline

2026-11-03 Threatist record created from CVE-2026-118448
2026-11-03 Alias added: GHSA-9w8f-4c2r-vh34
2026-11-03 CISA SSVC decision points changed
2026-11-03 Priority changed: MEDIUM → LOW

References

Other 1

https://pypi.org/project/pybddisasm/

TI-2024-02065 Privilege Escalation via the GravityZone productManager UpdateServer.KitsManager API (VA-11466) CVSS 3.1CRITICAL 9.8
TI-2007-05541 Unspecified vulnerability in BitDefender allows attackers to execute arbitrary code via… CVSS 3.1CRITICAL 9.8
TI-2012-01283 The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus… CVSS 2.0MEDIUM 4.3
TI-2012-01281 The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir… CVSS 2.0MEDIUM 4.3
TI-2012-01279 The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast!… CVSS 2.0MEDIUM 4.3
TI-2012-01265 The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat… CVSS 2.0MEDIUM 4.3

See all 111 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences