Binarly Analysis Engine
-
Vulnerability Database Service
- EMS scores above 8 now use logarithmic normalization, reducing top-tier score saturation from approximately 2,500 findings at EMS 10 down to 13. This provides finer-grained prioritization for high-severity findings. Scores at or below 8 are unchanged.
-
New Context-Aware Rule Detection (VulHunt, CryptoScan)
- Added VulHunt detection for CVE-2026-45185, a use-after-free vulnerability in Exim affecting versions above 4.97 linked against GnuTLS.
- Added CryptoScan checks for RSA key weaknesses using patterns from the badkeys project, covering small prime factors, small private exponent, polynomial key patterns, key bias, and invalid key parameters.
-
Analysis Framework Enhancements
- CVEHunt now prioritizes ecosystem package data over NVD. Detections not confirmed by OS package information are filtered out, reducing false positives for Linux distributions with package ecosystem coverage such as Ubuntu.
- Improved CVEHunt project linkage detection with better name-based package matching, reducing misclassification between project and vendored linkage types.
Bug Fixes
Analysis
- Disk image unpacking: Fixed incomplete unpacking of disk images and archives containing read-only directories.
Dependencies
- Duplicate dependency entries: Fixed a scan failure caused by duplicate dependency entries.
Vulnerability Data
- Ubuntu OVAL false positives: Fixed an issue where vulnerability ranges from Ubuntu OVAL streams were not removed from the database after Ubuntu updated their affected status to unaffected, which caused a small percentage of false positives for Ubuntu ecosystem findings.