CVE-2026-79113CWE-190

CVE-2026-79113

published October 3, 2026

CVSS

5.1

EPSS

0%

Percentile

3.0

In the wild

Unconfirmed

What it is

OpenAPV before 1.1.1.0 has a read_bitstream heap-based buffer overflow.

The record

Technical detail

CVSS: 5.1 · NONE
CVSS v4.0: 5.1 · CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
EPSS: 0.00140 · 3.0th percentile
Weakness: CWE-190 · Integer Overflow or Wraparound
Published: 2026-10-03T05:17Z

References (7)

https://aswf.io · [email protected]https://github.com/AcademySoftwareFoundation/openapv/commit/b5cc54bc786040ba3ac54020e7320e0add51e107 · [email protected]https://github.com/AcademySoftwareFoundation/openapv/compare/v0.3.0.0...v1.1.1.0 · [email protected]https://github.com/AcademySoftwareFoundation/openapv/issues/219 · [email protected]https://github.com/AcademySoftwareFoundation/openapv/pull/226 · [email protected]https://github.com/AcademySoftwareFoundation/openapv/tree/kp_handling_issues_20260713 · [email protected]https://github.com/AcademySoftwareFoundation/openapv/issues/219 · 134c704f-9b21-4f2e-91b3-4a467353bcc0

EPSS history

Timeline

07 OCT 03:42Z
EPSS moved — → 0%
epss
03 OCT 01:06Z
OpenAPV before 1.1.1.0 has a read_bitstream heap-based buffer overflow
cvelistv5