GHSA-96xm-fv9w-pf3f
Medium · 5.3CVSS
5.3
EPSS
—
Published
Jan 28, 2026
CISA due date
—
The record
soroban-sdk has overflow in Bytes::slice, Vec::slice, GenRange::gen_range for u64
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | soroban-sdk | 0 | 22.0.9 |
| crates.io | soroban-sdk | 23.0.0 | 23.5.1 |
| crates.io | soroban-sdk | 25.0.0 | 25.0.2 |
| cargo | soroban-sdk | 23.0.0 | 23.5.1 |
| cargo | soroban-sdk | 25.0.0 | 25.0.2 |
Related vulnerabilities
- CVE-2026-24889 soroban-sdk is a Rust SDK for Soroban contracts. Same vulnerability
- GHSA-x2hw-px52-wp4m rs-soroban-sdk: `Fr` scalar field equality comparison bypasses modular reduction Also affects soroban-sdk
- CVE-2026-32322 soroban-sdk is a Rust SDK for Soroban contracts. Also affects soroban-sdk
- CVE-2026-110264 An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before… CWE-190
- CVE-2026-53615 util-linux is a random collection of Linux utilities. CWE-190
- CVE-2026-106574 ImageMagick is free and open-source software used for editing and manipulating digital… CWE-190
- CVE-2026-106571 ImageMagick is free and open-source software used for editing and manipulating digital… CWE-190
- CVE-2026-75820 GNU Aspell contains an integer truncation vulnerability in the WritableDict::add()… CWE-190