GHSA-pm4j-7r4q-ccg8
NoneCVSS
—
EPSS
—
Published
Mar 7, 2026
CISA due date
—
The record
Soroban: Muxed address<->ScVal conversions may break after a conversion failure
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | soroban-env-host | 0 | 26.0.0 |
Related vulnerabilities
- CVE-2026-106432 The BSON encoder in the MongoDB PHP Driver converts a string length to a 32-bit value… CWE-681
- CVE-2026-98049 In the Linux kernel, the following vulnerability has been resolved: bpf: zero extend the… CWE-681
- CVE-2026-88387 LibRaw 0.22.0 contains an incorrect numeric conversion vulnerability in… CWE-681
- CVE-2026-77412 RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. CWE-681
- CVE-2026-84970 A numeric truncation weakness exists in the JSON parsing component of the MongoDB C++… CWE-681
- CVE-2026-82522 libjxl before 0.12 contains an integer underflow vulnerability in the container box… CWE-681
- CVE-2026-75145 FFmpeg before commit b4c199c contains an incorrect integer narrowing conversion in the… CWE-681
- CVE-2026-19879 A flaw was found in Undertow, an HTTP server, within its HTTP response header writing… CWE-681