CVE-2026-50593

Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset is within the allowed slot-map range.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/50xxx/CVE-2026-50593.json",
    "cwe_ids": [
        "CWE-191"
    ],
    "cna_assigner": "mitre"
}

References

Affected packages

Git / github.com/silnrsi/graphite

Affected ranges

Type

GIT

Repo

https://github.com/silnrsi/graphite

Events

Introduced

Fixed

ca8d821e60a15b6c24e404c9086992c975d8e1cf

Fixed

ad78c6b7319909e1540c1b134e115ced03417866

Database specific

{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.3.15"
        }
    ],
    "source": [
        "DESCRIPTION",
        "REFERENCES"
    ]
}

Affected versions

0.*

0.9.3

0.9.4

1.*

1.0.1

1.2.1

1.2.2

1.2.3

1.2.4

1.3.0

1.3.1

1.3.11

1.3.12

1.3.13

1.3.14

1.3.2

1.3.3

1.3.4

1.3.5

1.3.6

1.3.7

1.3.8

1.3.9

Release_0.*

Release_0.9

Other

base

r0.*

r0.9.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-50593.json"