CVE-2026-16013

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-16013
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-16013.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-16013
Published
2026-07-17T11:45:10Z
Modified
2026-10-28T10:45:49Z
Severity
  • 5.5 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
liftoff-sr CIPster cipepath.cc deserialize_symbolic out-of-bounds
Details

A vulnerability has been found in liftoff-sr CIPster up to 632336d414ef708a542377c1aa8d6fdb7c70a760. Affected by this issue is the function CipAppPath::deserialize_symbolic of the file source/src/cip/cipepath.cc. Such manipulation leads to out-of-bounds read. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The name of the patch is 886a4d090e1c5b0475f0b1c2fe0606a8f0d6a519. A patch should be applied to remediate this issue.

Database specific 
{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-119",
        "CWE-125"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/16xxx/CVE-2026-16013.json"
}
References

Affected packages

Git / github.com/liftoff-sr/cipster

Affected ranges

Type
GIT
Repo
https://github.com/liftoff-sr/cipster
Events
Introduced
632336d414ef708a542377c1aa8d6fdb7c70a760
Fixed
886a4d090e1c5b0475f0b1c2fe0606a8f0d6a519
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "632336d414ef708a542377c1aa8d6fdb7c70a760"
                },
                {
                    "last_affected": "632336d414ef708a542377c1aa8d6fdb7c70a760"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "fixed": "886a4d090e1c5b0475f0b1c2fe0606a8f0d6a519"
                }
            ],
            "source": "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

Other
632336d414ef708a542377c1aa8d6fdb7c70a760

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-16013.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "106253360742539284918984499503447975493",
                "296617394539193032221779271754891410954",
                "137333991866826449748626860914129646104",
                "149988062274280709992522418552039931019",
                "214538470077495927615061786959867826895",
                "282058733577602895189921676764421220085",
                "177309016366003113927535503470790837911",
                "230154360259290052185203972157140479117"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-16013-6fff59ae",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/liftoff-sr/cipster/commit/886a4d090e1c5b0475f0b1c2fe0606a8f0d6a519",
        "target": {
            "file": "source/src/cip/cipmessagerouter.cc"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "301337649179346628038434787868171233968",
            "length": 875
        },
        "id": "CVE-2026-16013-73f525d5",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/liftoff-sr/cipster/commit/886a4d090e1c5b0475f0b1c2fe0606a8f0d6a519",
        "target": {
            "file": "source/src/cip/cipepath.cc",
            "function": "CipAppPath::deserialize_symbolic"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "273938474473194478551360457840789441974",
            "length": 538
        },
        "id": "CVE-2026-16013-ddd3c707",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/liftoff-sr/cipster/commit/886a4d090e1c5b0475f0b1c2fe0606a8f0d6a519",
        "target": {
            "file": "source/src/cip/cipmessagerouter.cc",
            "function": "CipMessageRouterRequest::DeserializeMRReq"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "287019711278040882874437698706835358805",
                "274722399487160325850241329924126323783",
                "251285634217460035903782093679331574444",
                "198581045368887129604601547049319567409",
                "272017487196684513107359634215118271969",
                "158251120665691714100675335666561915318",
                "29613612377321274412991559597956195099",
                "62593826922081266833506219911400481145",
                "36835288611416926860331877555682127409",
                "145468159542262687001048146337906749115",
                "23739326960515706971943609605571584975",
                "330754095215736897090154531133069963369",
                "125757520762623816702335736434733775883",
                "324301899922340732718316928766829219176",
                "130115849816608792324851378498544774166",
                "228422986002818660967106575845432575826",
                "206767584321936520222628770048986430710",
                "32050996909844163796927275472123680713",
                "164411141383294686895934909299095045335"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-16013-f09f03a5",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/liftoff-sr/cipster/commit/886a4d090e1c5b0475f0b1c2fe0606a8f0d6a519",
        "target": {
            "file": "source/src/cip/cipepath.cc"
        }
    }
]
vanir_signatures_modified 
"2026-10-28T10:45:49Z"