GHSA-97wc-2hqc-cjgr
High · 7.3CVSS
7.3
EPSS
—
Published
May 9, 2026
CISA due date
—
The record
smallbitvec: Integer overflow in safe API leads to heap buffer overflow
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | smallbitvec | 1.0.1 | No fix |
Related vulnerabilities
- CVE-2026-44983 smallbitvec is a growable bit-vector for Rust, optimized for size. Same vulnerability
- CVE-2026-112403 Pillow is a Python imaging library. CWE-122
- CVE-2026-112393 Pillow is a Python imaging library. CWE-122
- CVE-2026-112395 Pillow is a Python imaging library. CWE-122
- CVE-2026-103658 GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer… CWE-122
- CVE-2026-107161 A heap-based buffer overflow flaw was found in Cyrus SASL. CWE-122
- CVE-2026-106574 ImageMagick is free and open-source software used for editing and manipulating digital… CWE-122
- CVE-2026-106564 ImageMagick is free and open-source software used for editing and manipulating digital… CWE-122