Threats tagged 'ghsa-xm87-hrrj-pq46'

CVE-2026-118445 is a use-after-free vulnerability in the pybddisasm Python bindings affecting structure-valued members of INSTRUX objects. These members reference memory owned by the parent INSTRUX object, but retaining a reference to a member does not keep the parent alive. Accessing a member after the parent object is freed can lead to accessing freed memory, potentially exposing process memory or causing a crash. Exploitation requires retaining and accessing a member reference after the parent is freed. The pybddisasm package is no longer maintained.