EUVD-2026-77443
GHSA-563x-fw87-x47c
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Requires PR:L access to submit source and UI:R to trigger parsing; OOB read yields no integrity impact, only minor info disclosure and potential crash.
Primary rating from Vendor (vuldb).
CVSS VectorVendor: vuldb
Lifecycle Timeline
3DescriptionCVE.org
A vulnerability was detected in marcobambini Gravity up to 0.9.7. This impacts the function parse_number_expression of the file src/compiler/gravity_parser.c of the component Number Parser. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The exploit is now public and may be used. Upgrading to version 0.9.8 will fix this issue. The patch is named 1b9bbf3ad5749e2a3434e6ad073c6e93c24207b6. It is recommended to upgrade the affected component.
AnalysisAI
Out-of-bounds read in the Gravity scripting language compiler (versions 0.9.0-0.9.7) allows remote attackers with code-submission access to trigger adjacent-memory disclosure or a process crash by supplying a crafted single-byte numeric token to the parser. The root cause is that parse_number_expression in src/compiler/gravity_parser.c reads value[1] to detect numeric prefixes (hex, octal, binary) without first verifying the token is at least two bytes long. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the ability to deliver attacker-controlled Gravity source code to an application that passes it to the Gravity compiler or parser - for example, a web service with a user-scriptable sandbox, a game engine scripting console, or a developer tool. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 base score of 2.0 (AV:N/AC:L/AT:N/PR:L/UI:P) correctly positions this as low-severity: exploitation requires PR:L access to supply crafted Gravity source and UI:P interaction through the parser pipeline, and all impact dimensions (VC:L/VI:L/VA:L) are bounded. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade to Gravity 0.9.8, which incorporates commit `1b9bbf3ad5749e2a3434e6ad073c6e93c24207b6` via PR #449 (https://github.com/marcobambini/gravity/pull/449). … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-119 – Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today