Read the docs
TI-2026-37304 Aliases CVE-2026-50593GHSA-3mqg-485v-x9g7

Integer underflow in Graphite

Priority LOW 31CWE-191Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Low · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset is within the allowed slot-map range.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00112 1st percentileScored 2026-11-07
Fix Fixed Graphite (Graphite project): 1.3.15

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
GraphiteGraphitebefore 1.3.151.3.15Patch availableCNA
  • Graphite VendorGraphite Affected before 1.3.15 Fixed in 1.3.15 Patch available CNA

Remediation

  • Fix · CNA Graphite (Graphite project) Fixed in 1.3.15

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-50593
  2. 2026-10-03 Alias added: GHSA-3mqg-485v-x9g7

References

Other 2

  • TI-2022-04326 Graphite Web Absolute Time Range cross site scripting CVSS 3.1MEDIUM 5.4
  • TI-2022-04325 Graphite Web Template Name cross site scripting CVSS 3.1MEDIUM 5.4
  • TI-2022-04324 Graphite Web Cookie cross site scripting CVSS 3.1MEDIUM 5.4
  • TI-2013-04426 The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through… CVSS 2.0MEDIUM 6.8
  • TI-2017-13792 send_email in graphite-web/webapp/graphite/composer/views.py in Graphite through 1.1.5 is… CVSS 3.1HIGH 7.5
  • TI-2013-05065 Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote… CVSS 2.0MEDIUM 6.8
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences