GHSA-x5m4-43jf-hh65
High · 7.5CVSS
7.5
EPSS
—
Published
Jan 28, 2026
CISA due date
—
The record
soroban-fixed-point-math has Incorrect Rounding and Overflow Handling in Signed Fixed-Point Math with Negatives
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | soroban-fixed-point-math | 1.3.0 | 1.3.1 |
| crates.io | soroban-fixed-point-math | 1.4.0 | 1.4.1 |
| cargo | soroban-fixed-point-math | 1.3.0 | No fix |
| cargo | soroban-fixed-point-math | 1.3.0 | 1.3.1 |
| cargo | soroban-fixed-point-math | 1.4.0 | No fix |
| cargo | soroban-fixed-point-math | 1.4.0 | 1.4.1 |
Related vulnerabilities
- CVE-2026-24783 soroban-fixed-point-math is a fixed-point math library for Soroban smart contacts. Same vulnerability
- CVE-2026-53670 PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. CWE-682
- CVE-2026-53671 PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. CWE-682
- CVE-2026-53706 PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. CWE-682
- CVE-2026-54754 Klever-Go is the Go implementation of the Klever blockchain protocol. CWE-682
- CVE-2026-76043 Incorrect calculation in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote… CWE-682
- CVE-2026-20763 Incorrect calculation for some Intel(R) TDX Guest software before version 0.3.1 within… CWE-682
- CVE-2026-55597 ImageMagick is free and open-source software used for editing and manipulating digital… CWE-682