CVE-2026-0810
EUVD-2026-466926.01.2026, 20:16
A flaw was found in gix-date. The `gix_date::parse::TimeBuf::as_str` function can generate strings containing invalid non-UTF8 characters. This issue violates the internal safety invariants of the `TimeBuf` component, leading to undefined behavior when these malformed strings are subsequently processed. This could potentially result in application instability or other unforeseen consequences.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| gitoxidelabs | gix-date | 𝑥 < 0.12.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-135 - Incorrect Calculation of Multi-Byte String LengthThe software does not correctly calculate the length of strings that can contain wide or multi-byte characters.
- CWE-682 - Incorrect CalculationThe software performs a calculation that generates incorrect or unintended results that are later used in security-critical decisions or resource management.
References