Vulnerability details

CVE-2026-55246

Tatsh bincookie

bincookie: Heap buffer overflow via unvalidated `num_pages` when parsing a `.binarycookies` file

CVSS 3.1

7.8High

Official description

bincookie is a header-only binarycookies parser. Prior to 0.1.9, bincookie_init_file() in bincookie.h allocates a buffer using the actual .binarycookies file length but trusts the file-controlled num_pages field as the loop bound for byte-swapping page_sizes entries. A crafted file can make the loop read and write beyond the heap allocation, and related unvalidated page sizes and cookie_offsets can drive additional out-of-bounds accesses in page and cookie iteration. Applications that parse an attacker-supplied binarycookies file may crash or suffer heap corruption that can potentially enable code execution. This issue is fixed in version 0.1.9.

CVSS scores

Score	Version	Source	Vector
7.8High	3.1	CVEProject cvelistV5 (CNA) (GitHub_M)	`CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H`

Affected products

Vendor	Product	Versions	Source
Tatsh	bincookie	< 0.1.9	CVEProject cvelistV5 (CNA)

References and advisories

https://github.com/Tatsh/bincookie/commit/bc1433c1ee4d0284750ff85c8437f1b8df91ab3b x_refsource_MISC
https://github.com/Tatsh/bincookie/releases/tag/v0.1.9 x_refsource_MISC
https://github.com/Tatsh/bincookie/security/advisories/GHSA-22pc-xxw4-q849 x_refsource_CONFIRM

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2026-10-15
Last updated: 2026-10-15
State: Published
Assigner (CNA): GitHub_M

Exploit prediction (EPSS)

0.22%

Probability of exploitation in 30 days

12.8%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: No
Exploitation: Proof of concept
Technical impact: Total

Weaknesses (CWE)

CWE-122
Heap-based Buffer Overflow
CWE-787
Out-of-bounds Write