CVE-2026-55246

Name of the Vulnerable Software and Affected Versions bincookie versions prior to 0.1.9

Description The bincookie init file() function in bincookie.h allocates a buffer based on the actual .binarycookies file length but uses the file-controlled num pages field as the loop bound for byte-swapping page sizes entries. A specially crafted file can cause the loop to read and write beyond the heap allocation. Additionally, unvalidated page sizes and cookie offsets can lead to further out-of-bounds accesses during page and cookie iteration. This may result in application crashes or heap corruption, potentially allowing for arbitrary code execution.

Recommendations Update to version 0.1.9.