Integer overflow in Aswf Openapv
CVE-2026-79113
OpenAPV before 1.1.1.0 has a read_bitstream heap-based buffer overflow.
Vulnerability class: Integer Overflow
Published .
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Affected products
Weakness classification (CWE)
References
- aswf.io
- github.com/AcademySoftwareFoundation/openapv/commit/b5cc54bc786040ba3ac54020e73…
- github.com/AcademySoftwareFoundation/openapv/compare/v0.3.0.0...v1.1.1.0
- github.com/AcademySoftwareFoundation/openapv/issues/219 (issue-tracking)
- github.com/AcademySoftwareFoundation/openapv/pull/226
- github.com/AcademySoftwareFoundation/openapv/tree/kp_handling_issues_20260713 (broken-link)