← Back to CVE List
CVE-2026-79113NVD
Vulnerability Summary
OpenAPV before 1.1.1.0 has a read_bitstream heap-based buffer overflow.
CVSS v4.0 Base Metrics — Score 5.1 (MEDIUM)
Attack VectorLocal
Attack ComplexityLow
Attack RequirementsNone
Privileges RequiredNone
User InteractionNone
Confidentiality (Vulnerable System)Low
Integrity (Vulnerable System)Low
Availability (Vulnerable System)Low
Confidentiality (Subsequent System)None
Integrity (Subsequent System)None
Availability (Subsequent System)None
Affected & Patched Versions
- aswf OpenAPV < 1.1.1.0
- aswf OpenAPV 1.1.1.0
External References
- https://github.com/AcademySoftwareFoundation/openapv/issues/219
- https://github.com/AcademySoftwareFoundation/openapv/tree/kp_handling_issues_20260713
- https://github.com/AcademySoftwareFoundation/openapv/commit/b5cc54bc786040ba3ac54020e7320e0add51e107
- https://github.com/AcademySoftwareFoundation/openapv/compare/v0.3.0.0...v1.1.1.0
- https://github.com/AcademySoftwareFoundation/openapv/pull/226
- https://aswf.io