CVE-2026-2644
LOW EPSS 12.6%
Published Feb 18, 20264mo ago · Modified Apr 29, 20262mo ago
1.9 CVSS 4.0
Published Feb 18, 2026 4mo ago
Last Modified Apr 29, 2026 2mo ago
Description
A weakness has been identified in niklasso minisat up to 2.2.0. This issue affects the function Solver::value in the library core/SolverTypes.h of the component DIMACS File Parser. This manipulation of the argument variable index with the input 2147483648 causes out-of-bounds read. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope X
Threat Intelligence
EPSS Exploit Probability
12.6% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available
Weaknesses 3
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer Memory Safety
CWE-125 Out-of-bounds Read Memory Safety
CWE-787 Out-of-bounds Write Memory Safety
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| minisat | minisat | * | ≤2.2.0 |
References 6
- github.com https://github.com/niklasso/minisat/
- github.com https://github.com/niklasso/minisat/issues/55
- github.com https://github.com/niklasso/minisat/issues/55#issue-3832527387
- vuldb.com https://vuldb.com/?ctiid.346406
- vuldb.com https://vuldb.com/?id.346406
- vuldb.com https://vuldb.com/?submit.752775
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.