CVE Vulnerabilities

CVE-2026-44927

Numeric Truncation Error

Published: May 08, 2026 | Modified: May 12, 2026
CVSS 3.x
5.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
2.2 LOW
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

In uriparser before 1.0.2, there is pointer difference truncation to int in various places.

Weakness

Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion.

Affected Software

NameVendorStart VersionEnd Version
UriparserUriparser_project*1.0.2 (excluding)
Red Hat Hardened ImagesRedHaturiparser-main-1.0.2-1.hum1*
UriparserUbuntuesm-apps/xenial*

Potential Mitigations

References