Skip to content

CVE-2026-50593 on CTRL-OS 26.05

Aliases: CVE-2026-50593

Packages: graphite2

Status: In Progress

Advisory Information

Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset is within the allowed slot-map range.

Updates

2026-07-20 19:14 CEST

Metadata changes:

  • Status for package graphite2: “In Progress” (de1bdf38930a3edb183820955695f0a97ac1c50d)

2026-07-20 19:13 CEST

Metadata changes:

  • Status for package graphite2: “Plausible” (de1bdf38930a3edb183820955695f0a97ac1c50d)

(Amended on: 2026-07-20 19:14 CEST)

2026-07-20 19:13 CEST

Metadata changes:

  • Status for package graphite2: “Plausible”

2026-07-20 19:13 CEST

Metadata changes:

  • Status for package graphite2: “New”