PT-2026-20356 · Niklasso · Minisat

Oneafter · Published 2026-02-18 · Updated 2026-02-18 · CVE-2026-2644

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions niklasso minisat versions prior to 2.2.1

Description A flaw exists in niklasso minisat up to version 2.2.0. The issue resides within the Solver::value function in the core/SolverTypes.h library of the DIMACS File Parser component. Manipulation of the index variable argument with an input of 2147483648 leads to an out-of-bounds read. This requires local access to exploit. The exploit is publicly available. The project maintainers were notified but have not yet responded.

Recommendations Update niklasso minisat to version 2.2.1 or later.

Exploit

Fix

Memory Corruption

Buffer Overflow

Out of bounds Read

Weakness Enumeration

CWE-787

CWE-119

CWE-125

Related Identifiers

CVE-2026-2644

Affected Products

Minisat

References · 15

• 🔥 https://github.com/niklasso/minisat/issues/55#issue-3832527387 · Exploit
• 🔥 https://vuldb.com/?submit.752775 · Exploit
• https://github.com/niklasso/minisat/issues/55 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-2644 · Security Note
• https://github.com/niklasso/minisat · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-2644 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-2644 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-2644 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-2644 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-2644 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-2644 · Vendor Advisory
• https://twitter.com/CVEnew/status/2024026127312748958 · Twitter Post
• https://t.me/CVEtracker/44947 · Telegram Post
• https://vuldb.com/?id.346406 · Note
• https://vuldb.com/?ctiid.346406 · Note