← العودة للجدول
CVE-2026-82737
CVE-2026-82737 — Integer Overflow or Wraparound vulnerability in ash-project ash lets an attacker
📅 2026-09-01
🟡 Medium 🔥 No NVD Vulnerability Vulnerability

📋 الوصف الكامل

Integer Overflow or Wraparound vulnerability in ash-project ash lets an attacker corrupt a stored vector and crash later reads of it by submitting a vector with more than 65,535 elements. Ash.Vector.new/1 (lib/ash/vector.ex) encodes a vector as followed by the element floats, packing the element count into a 16-bit field without checking its range. A list of more than 65,535 elements wraps the d

💻 الأنظمة المتأثرة

⚠️ نوع التهديد

Vulnerability

🔗 CVE ID

CVE-2026-82737

📡 المصدر

NVD

✅ الحلول والتخفيف

Refer to CVE-2026-82737 NVD advisory

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ← 🔍 Valters IT ←