{"id":"EUVD-2026-28834","revision":"b7ec20d6d0014acdb3296ec32da13b89","records":[{"revision":"b7ec20d6d0014acdb3296ec32da13b89","observedAt":"2026-10-28T05:12:33.178+00:00","statement":{"source":"euvd","id":"EUVD-2026-28834","aliases":["CVE-2026-42199"],"title":"Grid is a data structure grid for rust. From version 0.17.0 to before version 1.0.1, an integer overflow in Grid::expand_rows() can corrupt the relationship between the grid’s logical dimensions and its backing storage. After the internal i…","description":"Grid is a data structure grid for rust. From version 0.17.0 to before version 1.0.1, an integer overflow in Grid::expand_rows() can corrupt the relationship between the grid’s logical dimensions and its backing storage. After the internal invariant is broken, the safe API get() may invoke get_unchecked() with an invalid index, resulting in Undefined Behavior. This issue has been patched in version 1.0.1.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":6.2,"severity":null}],"references":["https://github.com/becheran/grid/security/advisories/GHSA-38c5-483c-4qqp","https://github.com/becheran/grid/commit/be213bd3528727148bef2d523c89e95d1fd9c072","https://github.com/becheran/grid/releases/tag/v1.0.1"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-28834","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"May 8, 2026, 9:15:16 PM","dateUpdated":"May 11, 2026, 4:00:21 PM"},"relatedAdvisories":[],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2026-28834","identifiers":["EUVD-2026-28834","CVE-2026-42199"]},"retained":false,"historicalAffected":[]}],"coverage":[]}