CVE-2026-94114: Apache Commons BCEL: Nested Code/Record attributes drive unbounded parse-time recursion in ClassParser
Apache Commons BCEL before 6.13.0 can recurse unboundedly while parsing nested Code or Record attributes (CVE-2026-94114).
Stories per day · 30 days
1 RSS
5 stories, newest first · one card per story
Stories tagged #bytecode
LuaRocks Security Incident September 2026
LuaRocks.org was breached via an exploited rockspec bytecode RCE, exposing credentials and three malicious packages.
Vidar Uses Custom Bytecode Interpreter and ARX Stream Ciphers for Per-Build String Obfuscation
Vidar stealer now hides strings with a custom bytecode VM and per-build ARX stream ciphers, weakening static detection.
3
TasmScan: Continuation-Aware Taint Analysis for TVM Bytecode with Savelist Abstraction
TasmScan introduces source-free taint analysis for TON smart-contract bytecode, detecting 95.3% of defects with 96.8% precision and 17x speedup.
New SLEEPWALKER Backdoor Waits for One Crafted Packet, Then Runs Its Own Bytecode
A new Windows backdoor dubbed SLEEPWALKER hides as ESET Management Agent's dpapi.dll, waits for a crafted network packet, then executes custom 23-instruction bytecode.