Apitrace (2.0 Through 14.0) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/apitrace-2.0-through-14.0/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 10 Nov 2026 18:28:18 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgapitrace: Heap-based buffer overflow in SnappyFile::flushReadCache (CVE-2026-126050)https://feed.craftedsignal.io/briefs/2026-11-apitrace-heap-overflow/Tue, 10 Nov 2026 18:28:18 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-apitrace-heap-overflow/apitrace versions 2.0 through 14.0 contain a heap-based buffer overflow in the SnappyFile::flushReadCache() function, allowing attackers to write past the m_compressedCache buffer via a crafted .trace file.A heap-based buffer overflow exists in apitrace versions 2.0 through 14.0 within the SnappyFile::flushReadCache() function. Attackers can supply a crafted .trace file with a 4-byte chunk length that exceeds the fixed size of the m_compressedCache buffer. When users dump, inspect, or replay these files, heap memory is corrupted.

]]>highadvisory