CVE-2026-24826CWE-125CWE-369CWE-476CWE-617CWE-787CWE-908

Out-of-bounds write in turso3d

Critical · published January 27, 2026

CVSS v4.0
10.0
EPSS
0%
Percentile
21.6
In the wild
Unconfirmed
What it is

Out-of-bounds Write, Divide By Zero, NULL Pointer Dereference, Use of Uninitialized Resource, Out-of-bounds Read, Reachable Assertion vulnerability in cadaver turso3d.This issue affects .

The record
Technical detail
CVSS v4.0
10.0 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00300 · 21.6th percentile
Weaknesses
CWE-125 · Out-of-bounds Read; CWE-369 · Divide By Zero; CWE-476 · NULL Pointer Dereference; CWE-617 · Reachable Assertion; CWE-787 · Out-of-bounds Write; CWE-908 · Use of Uninitialized Resource
Published
2026-01-27T09:11Z
EPSS history
Timeline
  • 27 JAN 09:11Z
    Out-of-bounds write in turso3d
    cvelistv5