Skip to main content

uriparser EUVDEUVD-2026-25776

| CVE-2026-42371 MEDIUM
Numeric Truncation Error (CWE-197)
2026-04-27 mitre
Information Disclosure Uriparser
5.1
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.1 MEDIUM
AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
SUSE
MEDIUM
qualitative
Red Hat
4.7 MEDIUM
qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Local
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

6
Patch released
Apr 27, 2026 - 18:57 nvd
Patch available
Patch available
Apr 27, 2026 - 08:01 EUVD
Analysis Generated
Apr 27, 2026 - 06:45 vuln.today
EUVD ID Assigned
Apr 27, 2026 - 06:30 euvd
EUVD-2026-25776
Analysis Generated
Apr 27, 2026 - 06:30 vuln.today
CVE Published
Apr 27, 2026 - 05:50 nvd
MEDIUM 5.1

DescriptionCVE.org

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes.

AnalysisAI

uriparser before 1.0.1 suffers a numeric truncation vulnerability in text range comparison that causes denial of service when processing URIs with gigabyte-scale lengths. The flaw occurs because internal range comparisons truncate large numeric values, allowing maliciously crafted oversized URIs to bypass length validation and trigger memory exhaustion or processing failures. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Craft oversized URI with gigabyte-scale length claim
Delivery
Deliver to vulnerable application
Exploit
Application parses with unpatched uriparser
Execution
Numeric truncation in range check bypasses validation
Persist
Memory exhaustion or buffer access violation
Impact
Denial of service or process crash
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires three specific conditions: (1) the application must accept and forward untrusted URIs directly to uriparser without independent length validation; (2) the application must not have external limits on URI size (HTTP server limits, network layer restrictions, or application-level input bounds); and (3) the URI must contain a component with a length field exceeding integer overflow thresholds (approximately 2 GB for 32-bit signed integers or 4 GB for unsigned 32-bit). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment CVSS 5.1 with local attack vector (AV:L), high complexity (AC:H), no privileges required, no user interaction, and universal scope (S:U) indicates a low-severity but real denial-of-service risk. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker crafts a malicious URI with a component length field claiming multiple gigabytes (e.g., a crafted query string header asserting 5 GB of data). If a local application or service processes this URI without pre-validating its declared size and passes it directly to uriparser, the library's range comparison overflows, truncating the large integer. …
Remediation Upgrade uriparser to version 1.0.1 or later. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Uriparser

View all
CVE-2026-44928 LOW
2.9 May 08

The EqualsUri function in uriparser before version 1.0.2 incorrectly classifies structurally distinct URIs as equivalent
CVE-2026-44927 LOW
2.9 May 08

Pointer difference truncation to signed int in uriparser before version 1.0.2 allows local attackers to cause integer ov

Same weakness CWE-197 – Numeric Truncation Error

View all
CVE-2022-42475 CRITICAL POC
9.8
CVE-2025-6965 HIGH POC
7.2
CVE-2026-42944 HIGH
8.7
CVE-2026-44823 HIGH
7.8
CVE-2026-40409 HIGH
7.8
CVE-2025-49679 HIGH
7.8
CVE-2026-32240 MEDIUM
6.5
CVE-2025-10543 MEDIUM
5.3

Same technique Information Disclosure

View all
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2014-6324 HIGH POC
8.8
CVE-2017-0213 HIGH POC
7.3
CVE-2016-7255 HIGH POC
7.8
CVE-2010-0232 HIGH POC
7.8
CVE-2025-30066 HIGH POC
8.6
CVE-2025-54236 CRITICAL POC
9.1

Vendor StatusVendor

SUSE

Severity: Medium
Product Status
SUSE Linux Enterprise Module for Package Hub 15 SP7 Fixed
SUSE Linux Enterprise Server 16.0 Fixed
SUSE Linux Enterprise Server 16.1 Fixed
SUSE Linux Enterprise Server for SAP applications 16.0 Fixed
SUSE Linux Enterprise Server for SAP applications 16.1 Fixed

Share

EUVD-2026-25776 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy