Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security flaw has been discovered in FascinatedBox lily up to 2.3. Impacted is the function clear_storages of the file src/lily_emitter.c. The manipulation results in out-of-bounds read. The attack is only possible with local access. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-3391 - FascinatedBox lily lily_emitter.c clear_storages out-of-bounds Intel Report: https://ift.tt/MzbqNlQ
Post summary
The alert announces CVE-2026-3391, an out‑of‑bounds issue in FascinatedBox’s lily_emitter.c, with brief technical details but no PoC, exploit, patch, or evidence of active exploitation.
CVE-2026-3391 Local Out-of-Bounds Read Vulnerability in FascinatedBox Lily Up to 2.3 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3391
Post summary
A local out-of-bounds read vulnerability (CVE-2026-3391) has been identified in FascinatedBox Lily up to version 2.3, with no PoC, exploit, or patch details provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | lily-lang | lily | - | - | - |