PT-2026-91177 · Marcobambini · Gravity

·

CVE-2026-90714

·

Published

2026-09-14

·

Updated

2026-09-15

CVSS v2.0

6.5

Medium

VectorAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions marcobambini Gravity versions prior to 0.9.8
Description A weakness in the JSON parser component, specifically within an unknown function in the src/utils/gravity json.c file, allows for remote memory corruption. Memory corruption occurs when a program unintentionally modifies the contents of a memory location, potentially leading to crashes or arbitrary code execution.
Recommendations Update to version 0.9.8.

Exploit

Fix

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-90714

Affected Products

Gravity