← CVE announcements

SECURITY ANNOUNCEMENT

CVE-2026-99260

3 November 2026

When setting sparse/compressed flags on a resident attribute, the function skipped the resident-to-non-resident conversion and terminated.

Introduced

Unavailable in source

Fixed releases

7.2.13 c5434e86d6c5324990017ea043bc821d115132c8

7.3 7ed0028126b5a19f278183abbae2b3166d3ca9ac

View source announcement ↗