VDB
CVE-2026-50593
CVE-2026-50593
PUBLISHED
CVSS 7.3 HIGH
Reported by mitre · Published June 5, 2026
Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset is within the allowed slot-map range.
Risk Scores
CVSS 3.1
7.3
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Graphite project | Graphite | 0 |
| Graphite project | Graphite | 0 |
| graphite_project | graphite | 0 |
Timeline
- Jun 5, 2026 EPSS Score
- Jun 5, 2026 Coalition ESS Score
- Jun 5, 2026 CVE Published
- Jun 5, 2026 CVE Updated
- Jun 7, 2026 Security Advisory
- Aug 7, 2026 EPSS Score