Tatsh CVE debriefs

CVE-2026-55246

A heap buffer overflow vulnerability exists in the bincookie library, specifically in the `bincookie_init_file()` function. This function allocates a buffer based on the actual length of a `.binarycookies` file but uses the file-controlled `num_pages` field as the loop bound for byte-swapping `page_sizes` entries. This can lead to the loop reading and writing beyond the heap allocation. Additionally, unva [truncated]