CVE-2026-2644

LOW

niklasso minisat <=2.2.0 - Memory Corruption

Title source: llm
STIX 2.1

Description

A weakness has been identified in niklasso minisat up to 2.2.0. This issue affects the function Solver::value in the library core/SolverTypes.h of the component DIMACS File Parser. This manipulation of the argument variable index with the input 2147483648 causes out-of-bounds read. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

References (6)

Core 6
Core References
Permissions Required, VDB Entry vdb-entry technical-description
https://vuldb.com/?id.346406
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.346406
Permissions Required, VDB Entry third-party-advisory
https://vuldb.com/?submit.752775
Issue Tracking issue-tracking
https://github.com/niklasso/minisat/issues/55

Scores

CVSS v3 3.3
EPSS 0.0022
EPSS Percentile 12.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-119 CWE-125 CWE-787
Status published
Products (1)
minisat/minisat < 2.2.0
Published Feb 18, 2026
Tracked Since Feb 18, 2026