Live › vulnerability › CVE-2026-91057
Go to dashboardThe multi-line text view display function reads one byte beyond the end of the application's text buffer when the string ends with a carriage return. The over-read can make callers advance past the string end, causing a second over-read and a row of text that is not in the source.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
_gx_multi_line_text_view_display_info_get() reads one byte past the end of the application's text buffer when the string it is given ends with a carriage return (\r). The over-read can also cause callers to advance their index past the end of the string, producing a second over-read in _gx_multi_line_text_view_string_total_rows_compute() and a row of text that is not in the source.
This page as .md · .json · in your agent: get_signal("CVE-2026-91057")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.