CVE-2026-55246 Details

A heap buffer overflow vulnerability has been identified in the Bincookie library, specifically in versions prior to 0.1.9. The issue arises in the `bincookie_init_file()` function, which allocates a buffer based on the actual length of a .binarycookies file. However, it improperly trusts the file-controlled `num_pages` field without validation, leading to out-of-bounds reads and writes on the heap. This vulnerability can be exploited by crafting a malicious .binarycookies file, causing applications that parse such files to crash or suffer heap corruption, potentially leading to arbitrary code execution.

Users are advised to update to Bincookie version 0.1.9 or later, where this vulnerability has been fixed. The patched version includes validation of the `num_pages` field and other file-derived counts and offsets, ensuring they do not exceed the actual bytes read from the file before they are used.