{"metadata": {"vulnerability": "CVE-2026-111282", "count": 15, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-09-27T00:00:00Z", "date_only": false, "value": "2026-09-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-111282", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-15T19:56:09.544Z", "date_only": false, "value": "2026-10-15T19:56:09.544Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-111282", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-15T21:43:26.018Z", "date_only": false, "value": "2026-10-15T21:43:26.018Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111282", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-15T21:43:26.018Z", "date_only": false, "value": "2026-10-15T21:43:26.018Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-111282", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T21:56:49.662Z", "date_only": false, "value": "2026-10-15T21:56:49.662231Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117447157951490762", "record": "CVE-2026-111282", "field": "creation_timestamp", "uuid": "109dc137-ab92-422f-a018-3ffd786b96af", "content": "CVE-2026-111282 iso14229 before 0.10.1 Out-of-Bounds Read via Handle_0x38_RequestFileTransfer Driftregion iso14229 before 0.10.1 contains an integer wraparound in Handle_0x38_RequestFileTransfer that lets unauthenticated attackers bypass the file path length check. Attackers can send a short RequestFileTransfer (SID 0x38) request with filePathAndNameLength 0xFFFC-0xFFFF, causing callbacks to read past the receive buffer, crashing targets or disclosing memory.\nhttps://www.cve.org/CVERecord?id=CVE-2026-111282https://github.com/driftregion/iso14229/security/advisories/GHSA-5hgv-5fqg-8vcrhttps://github.com/driftregion/iso14229/security/advisories/GHSA-ph4f-7v39-8hgmhttps://github.com/driftregion/iso14229/commit/2e36afcd7f0cd02b0c70446c1a265a7b1999d478https://github.com/driftregion/iso14229/blob/0.10.0/src/server.c#L1151-L1161https://github.com/driftregion/iso14229/releases/tag/0.10.1%2B9e7c47e8https://github.com/driftregion/iso14229https://www.vulncheck.com/advisories/iso14229-before-0.10.1-out-of-bounds-read-via-handle-0x38-requestfiletransfer#driftregion #iso14229#CVE_2026_111282#bot", "url": "https://infosec.exchange/users/cve/statuses/117447157951490762"}, {"timestamp": "2026-10-15T22:19:29Z", "date_only": false, "value": "2026-10-15T22:19:29Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-W2JF-RRFP-47W9", "record": "GHSA-W2JF-RRFP-47W9", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-15T22:19:29.600Z", "date_only": false, "value": "2026-10-15T22:19:29.600", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111282", "record": "FKIE_CVE-2026-111282", "field": "published"}, {"timestamp": "2026-10-16T00:31:54Z", "date_only": false, "value": "2026-10-16T00:31:54Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-W2JF-RRFP-47W9", "record": "GHSA-W2JF-RRFP-47W9", "field": "published"}, {"timestamp": "2026-10-16T00:31:54Z", "date_only": false, "value": "2026-10-16T00:31:54Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-W2JF-RRFP-47W9", "record": "GHSA-W2JF-RRFP-47W9", "field": "modified"}, {"timestamp": "2026-10-16T03:02:36.533Z", "date_only": false, "value": "2026-10-16T03:02:36.533952Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxxlmqmwi424", "record": "CVE-2026-111282", "field": "creation_timestamp", "uuid": "3021676b-f8ef-4f5a-a903-1bedb89a07a4", "content": "\ud83d\udfe0 CVE-2026-111282 - High (8.2)\n\nDriftregion iso14229 before 0.10.1 contains an integer wraparound in Handle_0x38_RequestFileTrans...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-111282/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxxlmqmwi424"}, {"timestamp": "2026-10-16T18:56:46.948Z", "date_only": false, "value": "2026-10-16T18:56:46.948780Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111282", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T18:56:46.948Z", "date_only": false, "value": "2026-10-16T18:56:46.948780Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111282", "record": "FKIE_CVE-2026-111282", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T18:57:41.530Z", "date_only": false, "value": "2026-10-16T18:57:41.530Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-111282", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T18:57:41.530Z", "date_only": false, "value": "2026-10-16T18:57:41.530Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111282", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T19:17:04.030Z", "date_only": false, "value": "2026-10-16T19:17:04.030", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111282", "record": "FKIE_CVE-2026-111282", "field": "lastModified"}]}