Creolabs Gravity before 0.9.6 contains a heap buffer overflow vulnerability in the gravity_vm_exec function that allows attackers to write out-of-bounds memory by crafting scripts with many string literals at global scop…
CVSS 4.0CRITICAL 9.3·Network·No auth·No interaction·EPSS 0.0064·Published 2026-04-16·Fixed in 0.9.6CWE-122