PT-2026-39309 · Pypi · Smallbitvec

Ksj1230 · Published 2026-05-09 · Updated 2026-05-27 · CVE-2026-44983

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions smallbitvec (affected versions not specified)

Description An integer overflow occurs during the internal capacity calculation within the buffer len(cap) function. When the cap variable is close to usize::MAX, unchecked arithmetic causes the value to wrap around in release builds, leading to an undersized heap allocation. This creates a discrepancy where internal metadata reflects a larger size than the actual allocated buffer. Consequently, safe API calls such as set, push, and reserve perform index computations based on this corrupted metadata, resulting in out-of-bounds memory access and a heap buffer overflow.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Heap Based Buffer Overflow

Integer Overflow

Weakness Enumeration

CWE-122

CWE-190

Related Identifiers

CVE-2026-44983

GHSA-97WC-2HQC-CJGR

Affected Products

Smallbitvec

References · 11

• 🔥 https://github.com/servo/smallbitvec/security/advisories/GHSA-97wc-2hqc-cjgr · Exploit
• https://ubuntu.com/security/CVE-2026-44983 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-44983 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-44983 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-44983 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-44983 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-44983 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-97wc-2hqc-cjgr · Vendor Advisory
• https://github.com/servo/smallbitvec · Note
• https://twitter.com/dailycve/status/2052952542955393032 · Twitter Post
• https://t.me/CVEtracker/55035 · Telegram Post