CVE-2026-42371

EUVD-2026-25776
uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.1 MEDIUM
LOCAL
HIGH
NONE
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 6.77%
Affected Products (NVD)
VendorProductVersion
uriparser_projecturiparser
𝑥
< 1.0.1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
uriparser
bookworm
no-dsa
forky
1.0.1+dfsg-1
fixed
sid
1.0.1+dfsg-1
fixed
trixie
no-dsa
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
uriparser
bionic
needed
focal
needed
jammy
needed
noble
needed
questing
ignored
resolute
needed
trusty
needed
xenial
needed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
php8.5
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-bcmath
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-bcmath-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-cli
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-cli-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-common
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-common-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-dba
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-dba-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-dbg
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-dbg-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-debugsource
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-devel
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-embedded
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-embedded-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-enchant
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-enchant-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-ffi
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-ffi-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-fpm
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-fpm-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-gd
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-gd-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-gmp
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-gmp-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-intl
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-intl-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-ldap
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-ldap-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-mbstring
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-mbstring-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-modphp
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-modphp-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-mysqlnd
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-mysqlnd-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-odbc
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-odbc-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-pdo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-pdo-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-pgsql
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-pgsql-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-process
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-process-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-snmp
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-snmp-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-soap
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-soap-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-sodium
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-sodium-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-tidy
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-tidy-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-xml
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-xml-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-zip
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-zip-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
Common Weakness Enumeration
References
https://github.com/uriparser/uriparser/pull/298
https://uriparser.github.io
http://www.openwall.com/lists/oss-security/2026/04/27/2