7.3

CVE-2026-50593: graphite_project graphite Integer Underflow (Wrap or Wraparound)

CVSS: 7.3v3.1HighAwaiting analysis
AliasesMGASA-2026-0298SUSE-SU-2026:22063-1SUSE-SU-2026:22072-1
Published 05-06-2026Last modified 05-06-2026
Open JSON

Vulnerability summary

CVE-2026-50593 is a high (CVSS 7.3) Integer Underflow (Wrap or Wraparound) vulnerability in graphite_project graphite. EPSS estimates a 0.11% chance of exploitation in the next 30 days, higher than 1.3% of scored vulnerabilities.

Overall risk
29/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.3/10
010
High · v3.1 (CVE.org)
EPSS score
0.11%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 2 · Related 2
SUSE-SU-2026:3140-1USN-8868-1

Timeline

  1. 05-06-2026
    PublishedVulnerability first disclosed.
  2. 05-06-2026
    Last modifiedVulnerability information updated.

Description

Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset is within the allowed slot-map range.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.11%

Chance of exploitation in the next 30 days

Percentile

1%

Versus all other CVEs

30-day change

0.00 pp

From 0.11% on 20-09-2026

20-09-202620-10-2026
EPSS score
0.11%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Suse21 products
  • graphite2&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS< 1.3.11-150000.4.6.1
  • graphite2&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS< 1.3.11-150000.4.6.1
  • graphite2&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS< 1.3.11-150000.4.6.1
  • graphite2&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS< 1.3.11-150000.4.6.1
  • graphite2&distro=SUSE Linux Enterprise Micro 5.3< 1.3.11-150000.4.6.1
Mageia2 products
  • graphite2< 1.3.14-4.1.mga10
  • graphite2< 1.3.14-2.1.mga9
Opensuse2 products
  • graphite2&distro=openSUSE Leap 16.0< 1.3.14-160000.3.1
  • graphite2&distro=openSUSE Tumbleweed< 1.3.15-1.1
Debian1 product
  • graphite2< 1.3.14-1+deb12u1 | < 1.3.14-2+deb13u1 | < 1.3.15-2
Graphite_project1 product
Ubuntu1 product
  • graphite2All versions (No fix recorded) | < 1.3.14-1ubuntu0.1 | < 1.3.14-2ubuntu0.24.04.1 | < 1.3.14-2ubuntu1.3 | < 1.3.14-11ubuntu1.1

6 vendors · 28 products

References

19 links
Show all 19 references