CVE-2026-118448
— UNSCOREDPublished 2026-11-03 · Updated 2026-11-03
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
A use of uninitialized memory vulnerability in the pybddisasm Python bindings affects nd_to_text. If the underlying text conversion fails, including failures caused by invalid parameters, the output buffer may remain uninitialized while still being converted into a Python return value. This may disclose residual process memory or cause the Python process to crash. Exploitation requires an application to invoke nd_to_text in a way that causes conversion to fail and to return or otherwise use the resulting output. The pybddisasm package is no longer maintained.
Weaknesses
CWE-457
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-100759
- MEDIUMCVE-2026-100783
- MEDIUMCVE-2026-100799
- MEDIUMCVE-2026-100802
- MEDIUMCVE-2026-100806
- HIGHCVE-2026-102717PoC
- LOWCVE-2026-103436PoC
- MEDIUMCVE-2026-109828PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.