Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: Deutsches Klimarechenzentrum Clear all filters
TI-2026-83849 CVE-2026-120457 · GHSA-6vjr-59w2-48mg

Out-of-bounds read in libaec second extension decoder

Priority MEDIUM 59

libaec through 1.1.7 contains an out-of-bounds read vulnerability in m_se_decode() in src/decode.c that allows attackers to bypass a signed bounds check via an overlong fundamental sequence.

CVSS 4.0MEDIUM 5.8 Local No auth User interaction EPSS 0.0024 Published 2026-11-02 Fix deferred CWE-196