CVE-2026-8295
mediumCVSS v3 Base Score
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS Score
0.1%
Exploitation probability in 30 days
Top 82% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Vulnerability Report
Generated by CyberWatcher
Description
A flaw was found in simdjson, a JSON parsing library. An integer overflow vulnerability in the document-builder API, specifically within the `string_builder::escape_and_append()` function, can occur when processing very large input strings on systems with limited `size_t` width, such as 32-bit builds. This overflow can lead to incorrect buffer size calculations and insufficient memory allocation. Consequently, this may result in out-of-bounds memory reads during SIMD (Single Instruction, Multiple Data) operations, potentially causing information disclosure, memory corruption, or malformed JSON output.
CWE
CWE-190Affected Products
Red Hat Advanced Cluster Management for Kubernetes 2