CVE-2026-50593

Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset is within the allowed slot-map range.

Database specific

{
    "cna_assigner": "mitre",
    "cwe_ids": [
        "CWE-191"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/50xxx/CVE-2026-50593.json"
}

References

Affected packages

Git / github.com/silnrsi/graphite

Affected ranges

Type

GIT

Repo

https://github.com/silnrsi/graphite

Events

Introduced

Fixed

ca8d821e60a15b6c24e404c9086992c975d8e1cf

Fixed

ad78c6b7319909e1540c1b134e115ced03417866

Database specific

{
    "source": [
        "DESCRIPTION",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.3.15"
        }
    ]
}

Affected versions

0.*

0.9.3

0.9.4

1.*

1.0.1

1.2.1

1.2.2

1.2.3

1.2.4

1.3.0

1.3.1

1.3.11

1.3.12

1.3.13

1.3.14

1.3.2

1.3.3

1.3.4

1.3.5

1.3.6

1.3.7

1.3.8

1.3.9

Release_0.*

Release_0.9

Other

base

r0.*

r0.9.1

Database specific

vanir_signatures_modified

"2026-08-07T21:41:23Z"

vanir_signatures

[
    {
        "target": {
            "file": "src/inc/opcodes.h"
        },
        "digest": {
            "line_hashes": [
                "75341939611501942463571008494524416469",
                "273979002683633346460868599917311641604"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "signature_type": "Line",
        "deprecated": false,
        "id": "CVE-2026-50593-6391cce8",
        "source": "https://github.com/silnrsi/graphite/commit/ad78c6b7319909e1540c1b134e115ced03417866"
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-50593.json"