{"uuid": "d0443c04-080f-4578-a884-6e0703ecbd04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45185", "type": "seen", "source": "https://t.me/thehackernews/8995", "content": "\ud83d\ude33 One sneaky plaintext byte is all it takes.\n\nExim\u2019s new \u201cDead.Letter\u201d (CVE-2026-45185) triggers when a client sends a TLS close_notify mid-BDAT, then slips in a final \\n.\n\nThat single write hits a freed TLS buffer \u2192 corrupts heap allocator metadata on GnuTLS builds (4.97\u20134.99.2).\n\nXBOW calls it one of the highest-caliber bugs they\u2019ve seen in Exim.\n\nPatch to 4.99.3 right now \ud83d\udc47 https://thehackernews.com/2026/05/new-exim-bdat-vulnerability-exposes.html", "creation_timestamp": "2026-05-13T18:26:18.000000Z"}