{"id":"CVE-2026-91057","kind":"vulnerability","aliases":["CVE-2026-91057"],"related":[],"title":"GX multi-line text view reads one byte past buffer end","description":"`_gx_multi_line_text_view_display_info_get()` reads one byte past the end of the application's text buffer when the string it is given ends with a carriage return (`\\r`). The over-read can also cause callers to advance their index past the end of the string, producing a second over-read in `_gx_multi_line_text_view_string_total_rows_compute()` and a row of text that is not in the source.","summary":"The multi-line text view display function reads one byte beyond the end of the application's text buffer when the string ends with a carriage return. The over-read can make callers advance past the string end, causing a second over-read and a row of text that is not in the source.","severity":"medium","cvss":4.6,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["embedded-ui","gx","package"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-20T16:17:16+00:00","first_seen_at":"2026-10-23T21:57:20+00:00","triaged_at":"2026-10-25T04:35:33+00:00","updated_at":"2026-10-25T04:35:33+00:00","category":"package","confidence":0.5,"triage":{"at":"2026-10-25T04:35:33Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"GX multi-line text view reads one byte past buffer end","impact":"low","summary":"The multi-line text view display function reads one byte beyond the end of the application's text buffer when the string ends with a carriage return. The over-read can make callers advance past the string end, causing a second over-read and a row of text that is not in the source.","category":"package","nicknames":[],"who_cares":["gx","embedded-ui"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Out-of-bounds read returns stray bytes and garbled text on screen","analyst_note":"Identify the affected GX library release and fixed version from the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-91057 and check which products bundle it.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000512,"input_tokens":3344,"output_tokens":356,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-91057':15A,18A 'advanc':59B,122C 'also':118C 'applic':40B,97C 'beyond':35B 'buffer':11A,43B,100C 'byte':9A,34B,91C 'caller':58B,120C 'carriag':50B,110C 'caus':64B,119C 'comput':146C 'cve':13A,16A 'display':30B,86C 'embed':20B 'embedded-ui':19B 'end':12A,37B,47B,63B,94C,107C,127C 'function':31B 'get':88C 'given':106C 'gx':1A,22B,81C,138C 'index':124C 'info':87C 'line':4A,27B,83C,140C 'make':57B 'multi':3A,26B,82C,139C 'multi-lin':2A,25B 'one':8A,33B,90C 'over-read':53B,67B,114C,134C 'packag':23B 'past':10A,60B,92C,125C 'produc':131C 'r':112C 'read':7A,32B,55B,69B,89C,116C,136C 'return':51B,111C 'row':72B,145C,149C 'second':66B,133C 'sourc':80B,157C 'string':46B,62B,103C,130C,143C 'text':5A,28B,42B,74B,84C,99C,141C,151C 'total':144C 'ui':21B 'view':6A,29B,85C,142C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T16:17:16+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"emo@eclipse.org","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-91057","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91057","severity":null,"published_at":"2026-10-20T16:17:16+00:00","modified_at":"2026-10-20T19:48:50+00:00","first_seen_at":"2026-10-23T21:57:20+00:00","fetched_at":"2026-10-23T22:28:58+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}