CVE-2026-128991 · Other
NO FIX YET · SEE WHAT TO DO
xschem is an electronic schematic editor, and versions 2.9.9 through 3.4.7 mishandle embedded-symbol records that lack a preceding instance in read_xschem_file(). A crafted schematic file that starts with a "[" record makes xschem read memory below the instance array, causing a crash.
first public Nov 13, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Anyone who opens untrusted or third-party xschem schematic files in an affected version is exposed, since the flaw is triggered by the file contents. Teams that only edit their own schematics and never open outside files are at lower risk. unknown whether a patch version is named in the sources beyond the linked fix.
Not affected if trusted-files-only, xschem-outside-version-range
Who cares eda, electronics, xschem
xschem --version3.4.7; the exact fixed version is unknown from the sourcesxschem 2.9.9 through 3.4.7 contains an out-of-bounds read vulnerability in read_xschem_file() in src/save.c that mishandles embedded-symbol records lacking a preceding instance. Attackers can supply a crafted schematic beginning with a "[" record, causing xschem to read and dereference memory below the instance array and crash.
This page as .md · .json · CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.