CVE-2026-3391

creationtimestamp| type| source ---|---|--- 2026-03-01 14:04:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfyvt4e4jq2e...

CVE-2026-3391

CVE-2026-3391 affects FascinatedBox lily up to version 2.3. The vulnerability is in the function clear_storages in src/lily_emitter.c and results in an out-of-bounds read. Exploitation requires local access, and public proof-of-concept/exploit code exists. The issue was disclosed via an issue rep...