Bytes
1 CVEs
product
Monthly
Integer overflow in the Bytes library versions 1.2.1 through 1.11.0 allows attackers to corrupt the BytesMut capacity value, leading to out-of-bounds memory access and undefined behavior in release builds. Public exploit code exists for this vulnerability, affecting applications that depend on Bytes for buffer management. A patch is available in version 1.11.1.
Integer Overflow
Bytes
NVD
GitHub
CVSS 3.1
7.5
EPSS
0.0%
CVE-2026-25541
EPSS 0%
CVSS 7.5
HIGH
POC
PATCH
This Week
Integer overflow in the Bytes library versions 1.2.1 through 1.11.0 allows attackers to corrupt the BytesMut capacity value, leading to out-of-bounds memory access and undefined behavior in release builds. Public exploit code exists for this vulnerability, affecting applications that depend on Bytes for buffer management. A patch is available in version 1.11.1.
Integer Overflow
Bytes
NVD
GitHub