Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
tar.Reader can allocate an unbounded amount of memory when reading a maliciously-crafted archive containing a large number of sparse regions encoded in the "old GNU sparse map" format.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-08 | 3 | Disclosure3 |
| 2026-04-15 | 1 | General1 |
| 2026-04-17 | 1 | Patch1 |
| 2026-04-18 | 1 | Patch1 |
CVE-2026-32288 tar.Reader can allocate an unbounded amount of memory when reading a maliciously-crafted archive containing a large number of sparse regions encoded in the "old GNU s… https://www.cve.org/CVERecord?id=CVE-2026-32288
Post summary
The CVE report explains that tar.Reader may allocate unbounded memory when parsing malicious archives with numerous sparse regions.
🔍 Lambda Watchdog detected that CVE-2026-32288 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/461 #AWS #Lambda #Security #CVE #DevOps #SecOps
Post summary
The post announces that CVE-2026-32288 has been removed from the latest AWS Lambda base images, indicating the vulnerability is no longer present. This confirms a patch or fix has been applied.
🔍 Lambda Watchdog detected that CVE-2026-32288 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/461 #AWS #Lambda #Security #CVE #DevOps #SecOps
Post summary
The post announces that CVE-2026-32288 has been removed from AWS Lambda base images, indicating a fix without providing exploit or technical details.
🟠 OpenTofu, Denial of Service, #CVE-2026-32280, #CVE-2026-32281, #CVE-2026-32283, #CVE-2026-32288 (Medium) https://dailycve.com/opentofu-denial-of-service-cve-2026-32280-cve-2026-32281-cve-2026-32283-cve-2026-32288-medium/
Post summary
The post announces four medium‑severity denial‑of‑service CVEs for OpenTofu, providing identifiers and a link to an article but lacking PoC, exploitation, or patch details.
🚨 New UNKNOWN CVE detected in AWS Lambda 🚨 CVE-2026-32288 impacts stdlib in 26 Lambda base images. Details: https://github.com/aws/aws-lambda-base-images/issues/461 More: https://lambdawatchdog.com/ #AWS #Lambda #CVE #CloudSecurity #Serverless
Post summary
A new CVE-2026-32288 affecting the standard library in 26 AWS Lambda base images has been reported, with links to a GitHub issue and additional resources for details.
⚡ New CVE Alert: CVE-2026-32288 🚨 Risk Level: Unknown 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-32288 #CVE-2026-32288 #CVE #CyberSecurity #InfoSec https://t.co/4NmHvVEKJf
Post summary
The tweet is purely an alert announcing the existence of CVE‑2026‑32288 with no additional technical, exploit, or mitigation information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | golang | go | - | - | - |