[
  {
    "id": "libnfs-getattr-len-desync-oob-read",
    "url": "https://benjaminali.com/advisories/libnfs-getattr-len-desync-oob-read/",
    "title": "Heap out-of-bounds read in libnfs NFSv4 GETATTR fattr4 decode",
    "product": "libnfs",
    "vendor": "sahlberg",
    "versionsAffected": "master before c0ad6bc6a; fixed 2026-07-28 (PR #593)",
    "cve": null,
    "cwe": "CWE-125",
    "severity": "medium",
    "status": "fixed",
    "found": "2026-07-13",
    "reported": "2026-07-27",
    "fixed": "2026-07-28",
    "disclosed": null,
    "links": [
      {
        "label": "Fix — libnfs PR #593 (merged)",
        "url": "https://github.com/sahlberg/libnfs/pull/593"
      }
    ],
    "writeup": "https://benjaminali.com/writeups/libnfs-getattr-length-desync/"
  },
  {
    "id": "libsmb2-fsinfo-oob-read",
    "url": "https://benjaminali.com/advisories/libsmb2-fsinfo-oob-read/",
    "title": "Heap out-of-bounds reads in libsmb2 QUERY INFO filesystem decoders",
    "product": "libsmb2",
    "vendor": "sahlberg",
    "versionsAffected": "master before dd0bbdee2; fixed 2026-07-28 (PR #471)",
    "cve": null,
    "cwe": "CWE-125",
    "severity": "medium",
    "status": "fixed",
    "found": "2026-07-13",
    "reported": "2026-07-27",
    "fixed": "2026-07-28",
    "disclosed": null,
    "links": [
      {
        "label": "Fix — libsmb2 PR #471 (merged)",
        "url": "https://github.com/sahlberg/libsmb2/pull/471"
      }
    ],
    "writeup": null
  },
  {
    "id": "libebml-ebmlmaster-negative-maxsize",
    "url": "https://benjaminali.com/advisories/libebml-ebmlmaster-negative-maxsize/",
    "title": "Missing master backport of an EBML element-size guard in libebml",
    "product": "libebml",
    "vendor": "Matroska-Org",
    "versionsAffected": "master before 372b681c3 (a guard already present on the v1.x branch was not forward-ported); fixed on master 2026-07-24",
    "cve": null,
    "cwe": "CWE-789",
    "severity": "low",
    "status": "fixed",
    "found": "2026-07-22",
    "reported": "2026-07-22",
    "fixed": "2026-07-24",
    "disclosed": null,
    "links": [
      {
        "label": "Fix commit 372b681c3 (EbmlMaster reading-loop guard, forward-ported to master)",
        "url": "https://github.com/Matroska-Org/libebml/commit/372b681c35fae9787c7326c1e15544b9eff0e656"
      }
    ],
    "writeup": "https://benjaminali.com/writeups/libebml-missing-backport/"
  },
  {
    "id": "libconfuse-empty-comment-null-deref",
    "url": "https://benjaminali.com/advisories/libconfuse-empty-comment-null-deref/",
    "title": "Empty comment causes a null dereference in libConfuse",
    "product": "libConfuse",
    "vendor": "libconfuse",
    "versionsAffected": "v3.3 through commit 8bc87dc48053; fixed in df808867a8cc",
    "cve": null,
    "cwe": "CWE-476",
    "severity": "low",
    "status": "fixed",
    "found": "2026-07-18",
    "reported": "2026-07-20",
    "fixed": "2026-07-20",
    "disclosed": "2026-07-21",
    "links": [
      {
        "label": "libconfuse/libconfuse#187",
        "url": "https://github.com/libconfuse/libconfuse/issues/187"
      }
    ],
    "writeup": "https://benjaminali.com/writeups/libconfuse-comment-null-deref/"
  },
  {
    "id": "basis-universal-ktx2-layer-count-dos",
    "url": "https://benjaminali.com/advisories/basis-universal-ktx2-layer-count-dos/",
    "title": "Excessive KTX2 layer count causes allocation-failure abort in basis_universal",
    "product": "basis_universal",
    "vendor": "Binomial LLC",
    "versionsAffected": "through commit 1b33fd5098c6; fixed in 3454230",
    "cve": null,
    "cwe": "CWE-789",
    "severity": "medium",
    "status": "fixed",
    "found": "2026-07-18",
    "reported": "2026-07-18",
    "fixed": "2026-07-18",
    "disclosed": null,
    "links": [
      {
        "label": "Fix commit 3454230",
        "url": "https://github.com/BinomialLLC/basis_universal/commit/3454230543d5d50ef95a5a89c15b2206c70a4dca"
      }
    ],
    "writeup": "https://benjaminali.com/writeups/basis-universal-ktx2-integer-arithmetic/"
  },
  {
    "id": "basis-universal-ktx2-level-offset-oob-read",
    "url": "https://benjaminali.com/advisories/basis-universal-ktx2-level-offset-oob-read/",
    "title": "Integer overflow leading to an out-of-bounds read in basis_universal KTX2 parsing",
    "product": "basis_universal",
    "vendor": "Binomial LLC",
    "versionsAffected": "through commit 1b33fd5098c6; fixed in 3454230",
    "cve": null,
    "cwe": "CWE-125",
    "severity": "medium",
    "status": "fixed",
    "found": "2026-07-18",
    "reported": "2026-07-18",
    "fixed": "2026-07-18",
    "disclosed": null,
    "links": [
      {
        "label": "Fix commit 3454230",
        "url": "https://github.com/BinomialLLC/basis_universal/commit/3454230543d5d50ef95a5a89c15b2206c70a4dca"
      }
    ],
    "writeup": "https://benjaminali.com/writeups/basis-universal-ktx2-integer-arithmetic/"
  },
  {
    "id": "libmysofa-dataspace-dos",
    "url": "https://benjaminali.com/advisories/libmysofa-dataspace-dos/",
    "title": "Denial of service (unbounded iteration) in libmysofa SOFA parsing",
    "product": "libmysofa",
    "vendor": "hoene",
    "versionsAffected": "libmysofa ≤ 1.3.4; fixed in v1.3.5",
    "cve": null,
    "cwe": "CWE-835",
    "severity": "medium",
    "status": "fixed",
    "found": "2026-07-10",
    "reported": "2026-07-10",
    "fixed": "2026-07-19",
    "disclosed": null,
    "links": [
      {
        "label": "Direct fix 50c61c4",
        "url": "https://github.com/hoene/libmysofa/commit/50c61c47b28914a83b9232b98b5e16b999b19809"
      },
      {
        "label": "Parser hardening 6cc5b15",
        "url": "https://github.com/hoene/libmysofa/commit/6cc5b15a73e9bd97810d03767082edda7f315881"
      },
      {
        "label": "Fixed release v1.3.5",
        "url": "https://github.com/hoene/libmysofa/releases/tag/latest"
      }
    ],
    "writeup": null
  },
  {
    "id": "libnfs-zdr-opaque-oob-read",
    "url": "https://benjaminali.com/advisories/libnfs-zdr-opaque-oob-read/",
    "title": "Heap out-of-bounds read in libnfs ZDR fixed-opaque decode",
    "product": "libnfs",
    "vendor": "sahlberg",
    "versionsAffected": "master before 91de6ece9bc7; fixed 2026-07-27",
    "cve": null,
    "cwe": "CWE-125",
    "severity": "medium",
    "status": "fixed",
    "found": "2026-07-10",
    "reported": "2026-07-10",
    "fixed": "2026-07-27",
    "disclosed": null,
    "links": [
      {
        "label": "Fix commit 91de6ece9bc7 (Fix out of bounds access in zdr_opaque)",
        "url": "https://github.com/sahlberg/libnfs/commit/91de6ece9bc7"
      }
    ],
    "writeup": null
  },
  {
    "id": "libsmb2-ntlm-challenge-oob-read",
    "url": "https://benjaminali.com/advisories/libsmb2-ntlm-challenge-oob-read/",
    "title": "Heap out-of-bounds read in libsmb2 NTLM CHALLENGE decode",
    "product": "libsmb2",
    "vendor": "sahlberg",
    "versionsAffected": "master before a68698ec2683; fixed 2026-07-27",
    "cve": null,
    "cwe": "CWE-125",
    "severity": "medium",
    "status": "fixed",
    "found": "2026-07-10",
    "reported": "2026-07-10",
    "fixed": "2026-07-27",
    "disclosed": null,
    "links": [
      {
        "label": "Fix commit a68698ec2683 (Fix out of bounds access in ntlmssp.c)",
        "url": "https://github.com/sahlberg/libsmb2/commit/a68698ec268317697b680220ea1a1cd2cf217845"
      }
    ],
    "writeup": null
  },
  {
    "id": "dr-flac-seektable-oob-read",
    "url": "https://benjaminali.com/advisories/dr-flac-seektable-oob-read/",
    "title": "Heap out-of-bounds read in dr_flac SEEKTABLE metadata parsing",
    "product": "dr_libs (dr_flac)",
    "vendor": "mackron",
    "versionsAffected": "dr_flac ≤ 0.13.4 (through commit cd99e2c)",
    "cve": null,
    "cwe": "CWE-125",
    "severity": "medium",
    "status": "fixed",
    "found": "2026-07-09",
    "reported": "2026-07-09",
    "fixed": "2026-07-14",
    "disclosed": null,
    "links": [
      {
        "label": "mackron/dr_libs#318",
        "url": "https://github.com/mackron/dr_libs/issues/318"
      },
      {
        "label": "Fix commit e1f125c",
        "url": "https://github.com/mackron/dr_libs/commit/e1f125c1e03ba65e98dcbe54bab2b9b86d7ccd1a"
      }
    ],
    "writeup": "https://benjaminali.com/writeups/dr-flac-seektable-oob-read/"
  }
]