{"vulnerability": "CVE-2026-32882", "sightings": [{"uuid": "bf787d3c-3278-481d-b274-1c9de67cb5c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32882", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmahdobytv2e", "content": "CVE-2026-32882 - libheif: Heap Buffer OOB Read in overlay compositing due to wrong alpha stride\nCVE ID : CVE-2026-32882\n \n Published : May 19, 2026, 9:16 p.m. | 58\u00a0minutes ago\n \n Description : libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prio...", "creation_timestamp": "2026-05-19T22:37:34.705993Z"}, {"uuid": "38df7ee8-1cf6-4516-a952-9597be92f7c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32882", "type": "seen", "source": "https://gist.github.com/ichintu/5841827a4cd9286d1b1bda016e23c9f0", "content": "This daily cyber threat intelligence digest highlights four key developments: (1) identity visibility remains foundational to modern security, despite increasing complexities in cloud and multicloud environments; (2) significant technical and operational hurdles continue to complicate out-of-band patching of compromised Operational Technology (OT) devices; (3) researchers leveraged Anthropic\u2019s Claude Opus 5 to chain vulnerabilities and breach OpenAI employee accounts (CVE-2026-32882, Sept 19, 2026); and (4) a critical RCE vulnerability (CVE-2026-93985, Sept 19, 2026) in OpenPanel\u2019s JavaScript runtime enables sandbox escapes for arbitrary code execution. Together, these updates underscore emerging threats in identity management, OT security, AI-assisted exploitation, and critical software flaws.", "creation_timestamp": "2026-09-19T16:01:30.134203Z"}, {"uuid": "53724773-4948-40d6-ba9a-826ed7792a0f", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32882", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fbe0bf49-cd97-455c-89f8-8cc99b2ea6b7", "content": "", "creation_timestamp": "2026-09-19T21:00:33.764456Z"}, {"uuid": "d450513c-0dc4-45eb-a243-d78450471897", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32882", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mw33r6tn4g2w", "content": "CVE-2026-32882 is trending. Hype score 7, currently #10 on cvemon.\n\nlibheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap buffer over-read in HeifPixelImage::overlay() in libheif/pixelimage.cc. When\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-32882", "creation_timestamp": "2026-09-22T01:39:01.156659Z"}]}