CVE-2026-118447

A use of uninitialized memory vulnerability in the pybddisasm Python bindings may disclose process memory when instruction decoding fails. The nd_decode, nd_decode_ex, nd_decode_ex2, and nd_decode_with_context functions may return an INSTRUX object whose contents have not been initialized after an unsuccessful decoding operation, including failures caused by invalid parameters. Accessing members of the returned object may expose residual process memory. Exploitation requires an application to access and expose the returned object contents after a decoding failure. The pybddisasm package is no longer maintained.

• CWE-457

• https://pypi.org/project/pybddisasm/

Published

Nov 3, 2026

Last Modified

Nov 3, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-118437The BuddyForms WordPress plugin before 2.10.1 does not prope…3.7
• CVE-2026-118438The Firelight Lightbox WordPress plugin before 2.3.24 does n…6.8
• CVE-2026-11844The iVEC-IEI Virtualization Edge Computer developed by IEI I…4.9
• CVE-2026-118444Out-of-bounds read vulnerabilities in the pybddisasm Python …4.8
• CVE-2026-118445A use-after-free vulnerability in the pybddisasm Python bind…6.9
• CVE-2026-118446A use-after-free vulnerability in the pybddisasm Python bind…6.9
• CVE-2026-118448A use of uninitialized memory vulnerability in the pybddisas…6.9
• CVE-2026-11845The iVEC-IEI Virtualization Edge Computer developed by IEI I…7.2
• CVE-2026-11846The  iVEC-IEI Virtualization Edge Computer developed by IEI …8.1
• CVE-2026-11847The  iVEC-IEI Virtualization Edge Computer developed by IEI…4.3
• CVE-2026-118475A flaw was found in Eye of GNOME. When parsing a specially c…3.6
• CVE-2026-118477The ei_git_repo_url parameter in the Git remote configuratio…9.8