Skip to main content

Bytes CVE-2026-25541

HIGH
Integer Overflow to Buffer Overflow (CWE-680)
2026-02-04 security-advisories@github.com GHSA-434x-w66g-qw3r
Integer Overflow Bytes Suse
7.5
CVSS 3.1 · GitHub Advisory
Share

Severity by source

GitHub Advisory PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
SUSE
HIGH
qualitative

Primary rating from GitHub Advisory.

CVSS VectorGitHub Advisory

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

4
Analysis Generated
Mar 12, 2026 - 21:54 vuln.today
PoC Detected
Feb 27, 2026 - 20:13 vuln.today
Public exploit code
Patch released
Feb 27, 2026 - 20:13 nvd
Patch available
CVE Published
Feb 04, 2026 - 22:16 nvd
HIGH 7.5

Blast Radius

ecosystem impact
† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth
  • 50 cargo packages depend on bytes (7 direct, 44 indirect)

Ecosystem-wide dependent count for version 1.2.1.

DescriptionGitHub Advisory

Bytes is a utility library for working with bytes. From version 1.2.1 to before 1.11.1, Bytes is vulnerable to integer overflow in BytesMut::reserve. In the unique reclaim path of BytesMut::reserve, if the condition "v_capacity >= new_cap + offset" uses an unchecked addition. When new_cap + offset overflows usize in release builds, this condition may incorrectly pass, causing self.cap to be set to a value that exceeds the actual allocated capacity. Subsequent APIs such as spare_capacity_mut() then trust this corrupted cap value and may create out-of-bounds slices, leading to UB. This behavior is observable in release builds (integer overflow wraps), whereas debug builds panic due to overflow checks. This issue has been patched in version 1.11.1.

AnalysisAI

Integer overflow in the Bytes library versions 1.2.1 through 1.11.0 allows attackers to corrupt the BytesMut capacity value, leading to out-of-bounds memory access and undefined behavior in release builds. Public exploit code exists for this vulnerability, affecting applications that depend on Bytes for buffer management. A patch is available in version 1.11.1.

Technical ContextAI

Affects Bytes. Bytes is a utility library for working with bytes. From version 1.2.1 to before 1.11.1, Bytes is vulnerable to integer overflow in BytesMut::reserve. In the unique reclaim path of BytesMut::reserve, if the condition "v_capacity >= new_cap + offset" uses an unchecked addition. When new_cap + offset overflows usize in release builds, this condition may incorrectly pass, causing self.cap to be set to a value that exceeds the actual allocated capacity. Subsequent APIs such as spare_capacity_mut() th

RemediationAI

A vendor patch is available — apply it immediately. Fixed in version 1.11.1.. Restrict network access to the affected service where possible.

More in Bytes

View all
CVE-2026-11625 HIGH
7.5 Jun 26

Predictable secret generation in the Perl module Bytes::Random::Secure (versions through 0.29) occurs because the module
CVE-2026-11702 HIGH
7.5 Jun 26

Predictable secret generation in the Perl module Bytes::Random::Secure::Tiny (versions through 1.011) occurs because a P

Same weakness CWE-680 – Integer Overflow to Buffer Overflow

View all
CVE-2021-40417 CRITICAL POC
9.8
CVE-2021-21832 CRITICAL POC
9.8
CVE-2021-21783 CRITICAL POC
9.8
CVE-2018-8787 CRITICAL POC
9.8
CVE-2018-8786 CRITICAL POC
9.8
CVE-2026-55200 CRITICAL POC
9.2
CVE-2025-32023 HIGH POC
7.0
CVE-2021-3321 HIGH POC
8.8

Same technique Integer Overflow

View all
CVE-2014-0497 CRITICAL POC
9.8
CVE-2013-2729 CRITICAL POC
9.8
CVE-2015-8651 HIGH
8.8
CVE-2012-5054 HIGH POC
8.8
CVE-2014-0569 CRITICAL POC
9.3
CVE-2023-21716 CRITICAL POC
9.8
CVE-2017-3599 HIGH POC
7.5
CVE-2017-7529 HIGH
7.5

Vendor StatusVendor

SUSE

Severity: Important
Product Status
SUSE Linux Enterprise Micro 5.3 Fixed
SUSE Linux Enterprise Micro 5.4 Fixed
SUSE Linux Enterprise Micro 5.5 Fixed
SUSE Linux Micro 6.2 Fixed
SUSE Package Hub 15 SP7 Fixed

Share

CVE-2026-25541 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy