CVE-2026-2644

NameCVE-2026-2644
DescriptionA weakness has been identified in niklasso minisat up to 2.2.0. This issue affects the function Solver::value in the library core/SolverTypes.h of the component DIMACS File Parser. This manipulation of the argument variable index with the input 2147483648 causes out-of-bounds read. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
SourceCVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
minisat2 (PTS)bookworm, bullseye1:2.2.1-5vulnerable
forky, sid, trixie1:2.2.1-8vulnerable

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
minisat2source(unstable)(unfixed)unimportant

Notes

Crash in CLI tool, no security impact
https://github.com/niklasso/minisat/issues/55

Search for package or bug name: Reporting problems