{"id":"CVE-2026-11463","summary":"USCiLab Cereal Shared Pointer type confusion","details":"A vulnerability was determined in USCiLab Cereal up to 1.3.2. Affected is an unknown function of the component Shared Pointer Handler. Executing a manipulation can lead to type confusion. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.","modified":"2026-07-08T07:46:35.828678806Z","published":"2026-06-07T22:15:12.845Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/11xxx/CVE-2026-11463.json","cna_assigner":"VulDB","cwe_ids":["CWE-843"]},"references":[{"type":"WEB","url":"https://github.com/USCiLab/cereal/"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/11xxx/CVE-2026-11463.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11463"},{"type":"ADVISORY","url":"https://vuldb.com/cve/CVE-2026-11463"},{"type":"ADVISORY","url":"https://vuldb.com/submit/814456"},{"type":"ADVISORY","url":"https://vuldb.com/vuln/369083"},{"type":"REPORT","url":"https://github.com/USCiLab/cereal/issues/870"},{"type":"REPORT","url":"https://vuldb.com/vuln/369083/cti"},{"type":"EVIDENCE","url":"https://gist.github.com/TrebledJ/0223c1fa3c3fd64e2c7047b8a4385ec0"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/uscilab/cereal","events":[{"introduced":"02eace19a99ce3cd564ca4e379753d69af08c2c8"},{"last_affected":"ebef1e929807629befafbb2918ea1a08c7194554"}],"database_specific":{"source":"AFFECTED_FIELD","extracted_events":[{"introduced":"1.3.0"},{"last_affected":"1.3.0"},{"introduced":"1.3.1"},{"last_affected":"1.3.1"},{"introduced":"1.3.2"},{"last_affected":"1.3.2"}]}}],"versions":["1.3.0","1.3.1","1.3.2","v1.3.2","v1.3.1","v1.3.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-11463.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}]}