marcobambini Gravity JSON parser gravity_json.c memory corruption
cve-program · CVE-2026-90714
PublishedA weakness has been identified in marcobambini Gravity up to 0.9.7. The impacted element is an unknown function of the file src/utils/gravity_json.c of the component JSON parser. This manipulation causes memory corruption. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 0.9.8 is sufficient to resolve this issue. Patch name: 9b337c3eae5833c3956bed1fc01c21c14fd443f2. It is suggested to upgrade the affected component.
Read the publisher's advisoryAffected versions, risk and source history
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
CVE-2026-90714 · CVE overview and exploitation status
cve-program · CVE-2026-90714
- https://vuldb.com/vuln/403268
- https://vuldb.com/vuln/403268/cti
- https://vuldb.com/cve/CVE-2026-90714
- https://vuldb.com/submit/919185
- https://github.com/marcobambini/gravity/issues/448
- https://github.com/marcobambini/gravity/pull/451
- https://github.com/sthagen/marcobambini-gravity/commit/9b337c3eae5833c3956bed1fc01c21c14fd443f2
- https://github.com/marcobambini/gravity/releases/tag/0.9.8
- https://github.com/marcobambini/gravity/
Related changes
Linked by CVE identifierNo related changes are available here.