Mmastodon TechnologyCybersecurity first seen 24 d ago, last 24 d ago, peak #11

High-severity integer overflow flaw disclosed in OpenS100 parser

Original: 🟠 CVE-2026-35001 - High (7.8) OpenS100 through commit daa35b contains an integer overflow vulnerability in the S-102 Bat

A new vulnerability, CVE-2026-35001, has been disclosed in OpenS100 through commit daa35b. The flaw, rated high at 7.8, is an integer overflow in the S-102 Bathymetric Surface parser that lets remote attackers trigger a heap-based buffer overflow by getting a user to open a crafted malicious S-102 HDF5 file with a manipulated grid. Security feeds are circulating the advisory, and users of the open-source S-100 tooling are expected to check whether patched versions are available.

Why now: A newly published high-severity remote code-risk vulnerability in open-source maritime data software is being circulated in security advisories.

OpenS100CVE-2026-35001S-102 Bathymetric Surface parser

Open on mastodon →

Evidence

• 🟠 CVE-2026-35001 - High (7.8) OpenS100 through commit daa35b contains an integer overflow vulnerability in the S-102 Bathymetric Surface parser that allows remote attackers to cause a heap-based buffer overflow by opening a crafted S-102 HDF5 file with malicious grid… · thehackerwire

API: https://socialmediatrends-api.osmike.com/v1/trends/2062065