CVE-2026-55777

GoAccess (real-time web log analyzer/viewer) is affected by an out-of-bounds heap read in the parse_ios() function prior to version 1.11. A crafted User-Agent in a processed access log can cause memmove to use an attacker-controlled offset as both source offset and copy length, allowing reading u...