Curated security research, vulnerabilities, advisories and tools for practitioners.

#out-of-bounds

Security coverage tagged out-of-bounds.

1.

GHSA-9v8h-qqgm-4m35: Out-of-Bounds Write in Brotli Decoder ("Node2Shell") Affects Python & Node.js Ecosystems (CVE-2026-111497)

advisory | Critical | 2026-10-22 15:32 | CVE-2026-111497 | github.com | Original ↗ | .md | #rce | #supply-chain | #nodejs

2.

Out of Bounds, Out of Sandbox: RCE in Go JavaScript Engine

research | 2026-10-07 00:00 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research | #sandbox-escape

3.

CVE-2026-11645: Out-of-Bounds Read/Write in V8.

vulnerability | High | Actively exploited | 2026-06-08 00:00 | CVE-2026-11645 | bugpwn.com | Original ↗ | .md | #active-exploitation | #rce | #zero-day

4.

[CVE-2026-0899] CHECK Removed, Context Confused, Checkmate Achieved

research | 2026-04-01 00:00 | CVE-2026-0899 | starlabs.sg | Original ↗ | .md | #vulnerability-research | #v8 | #chrome

5.

CVE-2024-11477- 7-Zip ZSTD Buffer Overflow Vulnerability

vulnerability | 2025-05-08 15:11 | CVE-2024-11477 | crowdfense.com | Original ↗ | .md | #vulnerability-analysis | #buffer-overflow | #out-of-bounds