CVE-2026-42371

EUVD-2026-25776
uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.1 MEDIUM
LOCAL
HIGH
NONE
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
uriparser_projecturiparser
𝑥
< 1.0.1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
uriparser
bookworm
no-dsa
bullseye
vulnerable
bullseye (security)
vulnerable
forky
vulnerable
sid
vulnerable
trixie
no-dsa
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
php8.5
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-bcmath
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-bcmath-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-cli
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-cli-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-common
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-common-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-dba
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-dba-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-dbg
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-dbg-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-debugsource
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-devel
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-embedded
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-embedded-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-enchant
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-enchant-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-ffi
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-ffi-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-fpm
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-fpm-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-gd
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-gd-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-gmp
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-gmp-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-intl
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-intl-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-ldap
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-ldap-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-mbstring
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-mbstring-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-modphp
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-modphp-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-mysqlnd
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-mysqlnd-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-odbc
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-odbc-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-pdo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-pdo-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-pgsql
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-pgsql-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-process
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-process-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-snmp
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-snmp-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-soap
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-soap-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-sodium
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-sodium-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-tidy
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-tidy-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-xml
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-xml-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-zip
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
php8.5-zip-debuginfo
Amazon Linux 2023
0:8.5.6-1.amzn2023.0.1
fixed
Common Weakness Enumeration
References
https://github.com/uriparser/uriparser/pull/298
https://uriparser.github.io
http://www.openwall.com/lists/oss-security/2026/04/27/2