[ CVE-2026-79113 · Published 3 Oct 2026 ]
Vulnerability in aswf OpenAPV
CVSS 5.1
EPSS <1%No fix listed yet
[ Why it matters ]Priority signals
- Public proof-of-concept exploit exists (CISA SSVC)
[ Description ]Official description
OpenAPV before 1.1.1.0 has a read_bitstream heap-based buffer overflow.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.
[ References ]References
- aswf.io
- github.com/AcademySoftwareFoundation/openapv/commit/b5cc54bc786040ba3ac54020e7320e0add5…
- github.com/AcademySoftwareFoundation/openapv/compare/v0.3.0.0...v1.1.1.0
- github.com/AcademySoftwareFoundation/openapv/issues/219
- github.com/AcademySoftwareFoundation/openapv/pull/226
- github.com/AcademySoftwareFoundation/openapv/tree/kp_handling_issues_20260713