CVEvulnerability
CVE-2026-0810
7.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2026-01-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.1 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
- CVSS 3.1 ([email protected])
- 7.1 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
- Weaknesses
- CWE-135, CWE-682
Description
A flaw was found in gix-date. The `gix_date::parse::TimeBuf::as_str` function can generate strings containing invalid non-UTF8 characters. This issue violates the internal safety invariants of the `TimeBuf` component, leading to undefined behavior when these malformed strings are subsequently processed. This could potentially result in application instability or other unforeseen consequences.
Affected configurations
• gitoxidelabs gix-date (< 0.12.0)
Related
References
- https://access.redhat.com/security/cve/CVE-2026-0810 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2427057 Issue Tracking
- https://crates.io/crates/gix-date Product
- https://github.com/GitoxideLabs/gitoxide/issues/2305 Exploit, Issue Tracking
- https://rustsec.org/advisories/RUSTSEC-2025-0140.html Third Party Advisory
- https://github.com/GitoxideLabs/gitoxide/issues/2305 Exploit, Issue Tracking