https://feed.craftedsignal.io/products/fflate--0.8.3/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 05 Nov 2026 04:27:17 +0000https://feed.craftedsignal.io/favicon-32x32.pnghttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svghttps://feed.craftedsignal.io/briefs/2026-11-fflate-memory-corruption/Thu, 05 Nov 2026 04:27:17 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-fflate-memory-corruption/A memory corruption vulnerability has been identified in 101arrowz fflate up to version 0.8.3 within the unzipSync function.A weakness exists in 101arrowz fflate up to version 0.8.3. The issue affects the unzipSync function in esm/index.mjs and causes memory corruption. The attack can be initiated remotely, and public exploit code is available. The vendor did not respond to initial disclosure attempts.

]]>highadvisory