Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Bytes is a utility library for working with bytes. From version 1.2.1 to before 1.11.1, Bytes is vulnerable to integer overflow in BytesMut::reserve. In the unique reclaim path of BytesMut::reserve, if the condition "v_capacity >= new_cap + offset" uses an unchecked addition. When new_cap + offset overflows usize in release builds, this condition may incorrectly pass, causing self.cap to be set to a value that exceeds the actual allocated capacity. Subsequent APIs such as spare_capacity_mut() then trust this corrupted cap value and may create out-of-bounds slices, leading to UB. This behavior is observable in release builds (integer overflow wraps), whereas debug builds panic due to overflow checks. This issue has been patched in version 1.11.1.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-25541 Bytes is a utility library for working with bytes. From version 1.2.1 to before 1.11.1, Bytes is vulnerable to integer overflow in BytesMut::reserve. In the unique re… https://www.cve.org/CVERecord?id=CVE-2026-25541
Post summary
This brief entry discloses CVE-2026-25541, describing an integer overflow in BytesMut::reserve for Bytes library versions 1.2.1 to 1.11.1.
CVE-2026-25541 Integer Overflow in Bytes Library BytesMut::reserve Leading to Potential Memory Corruption https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25541
Post summary
A newly reported integer overflow vulnerability in the Bytes library's BytesMut::reserve function that can lead to memory corruption, with no PoC, exploit tool, or active exploitation details provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | tokio-rs | bytes | - | rust | - |