Threats affecting pkg:github/sliver

CVE-2026-102507 is an out-of-bounds read vulnerability in BishopFox's Sliver C2 framework version 1.7.7 and earlier. It occurs in the operator gRPC handler when processing malformed or empty Download responses from compromised implants. This flaw allows an attacker controlling a hostile implant session to crash the entire teamserver by triggering an unhandled panic via zero-length or very short data payloads. The vulnerability stems from the Binject library's BinaryMagic function and results in termination of the server process, impacting all connected operators.