{"uuid": "12fc775a-8005-407a-8885-7f7a4efe7f01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45185", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/411", "content": "CVE-2026-45185\n\nExim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing path. It is triggered when a client sends a TLS closenotify mid-body during a CHUNKING transfer, followed by a final cleartext byte on the same TCP connection. This can lead to heap corruption. An unauthenticated network attacker exploiting this vulnerability could execute arbitrary code.", "creation_timestamp": "2026-08-28T00:00:33.052495Z"}