Integer overflow in Simdjson

CVE-2026-8295

An integer overflow vulnerability in the simdjson document-builder API allows incorrect buffer size calculations in "string_builder::escape_and_append()" when processing very large input strings on platforms with limited "size_t" width (e…

Vulnerability class: Integer Overflow

EPSS: 0.001 (17.6th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References