Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In uriparser before 1.0.2, there is pointer difference truncation to int in various places.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-05-08 | 1 | Disclosure1 |
| 2026-05-09 | 1 | Disclosure1 |
| 2026-05-10 | 1 | Patch1 |
uriparser 1.0.2 fixes 2 CVEs https://www.openwall.com/lists/oss-security/2026/05/10/1 CVE-2026-44927: Pointer difference truncation to int CVE-2026-44928: Function family EqualsUri can misclassify two unequal URIs as equal
Post summary
The post announces the release of uriparser 1.0.2 that patches CVE-2026-44927 and CVE-2026-44928, providing a patch link but no evidence of exploits or false positives.
CVE-2026-44927 In uriparser before 1.0.2, there is pointer difference truncation to int in various places. https://www.cve.org/CVERecord?id=CVE-2026-44927
Post summary
The statement identifies CVE-2026-44927 as a pointer difference truncation to int bug in uriparser before 1.0.2, but provides no PoC, exploit, patch, or active exploitation information.
CVE-2026-44927 Pointer Difference Truncation to Int in Uriparser Before 1.0.2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-44927 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
A new CVE-2026-44927 was disclosed for a pointer difference truncation bug in Uriparser prior to version 1.0.2, but no PoC, exploit, active usage, patch, or debunking details are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | uriparser_project | uriparser | - | - | - |