CVE-2026-33598

Out-of-bounds read in cache inspection via Lua

Medium · published April 22, 2026

CVSS v3.1
4.8
EPSS
3%
Percentile
86.6
In the wild
Unconfirmed
What it is

A cached crafted response can cause an out-of-bounds read if custom Lua code calls getDomainListByAddress() or getAddressListByDomain() on a packet cache.

The record
Technical detail
CVSS v3.1
4.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.02845 · 86.6th percentile
Published
2026-04-22T13:46Z
EPSS history
Timeline
  • 22 APR 13:46Z
    Out-of-bounds read in cache inspection via Lua
    cvelistv5