bytes has integer overflow in BytesMut::reserve

🗓️ 03 Feb 2026 19:17:46Reported by GitHub Advisory DatabaseType

BytesMut::reserve may overflow in release builds, corrupting capacity and risking out-of-bounds access.

Reporter	Title	Published	Views	Family All 58
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway vulnerable to Denial of Service due to use of Bytes (CVE-2026-25541)	8 Apr 202616:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Data Collector uses bytes-1.10.0.crate which is vulnerable to CVE-2026-25541.	30 Mar 202607:01	–	ibm
ATTACKERKB	CVE-2026-25541	4 Feb 202622:03	–	attackerkb
CBLMariner	CVE-2026-25541 affecting package kata-containers for versions less than 3.19.1.kata2-5	27 Feb 202604:00	–	cbl_mariner
CBLMariner	CVE-2026-25541 affecting package netavark for versions less than 1.10.3-7	6 Apr 202623:43	–	cbl_mariner
CBLMariner	CVE-2026-25541 affecting package azl-compliance for versions less than 1.0.2-3	9 Mar 202614:32	–	cbl_mariner
CBLMariner	CVE-2026-25541 affecting package rpm-ostree for versions less than 2024.4-8	7 Apr 202600:40	–	cbl_mariner
CBLMariner	CVE-2026-25541 affecting package rust for versions less than 1.75.0-27	6 Apr 202623:43	–	cbl_mariner
CBLMariner	CVE-2026-25541 affecting package rust for versions less than 1.90.0-6	6 Apr 202623:43	–	cbl_mariner
CBLMariner	CVE-2026-25541 affecting package rust for versions less than 1.72.0-15	14 Apr 202618:44	–	cbl_mariner

Vulners

Node

Source	Link
github	www.github.com/tokio-rs/bytes/security/advisories/GHSA-434x-w66g-qw3r
github	www.github.com/tokio-rs/bytes/commit/d0293b0e35838123c51ca5dfdf468ecafee4398f
github	www.github.com/tokio-rs/bytes/releases/tag/v1.11.1
rustsec	www.rustsec.org/advisories/RUSTSEC-2026-0007.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-25541
github	www.github.com/advisories/GHSA-434x-w66g-qw3r

05 Feb 2026 00:37Current

5.4Medium risk

Vulners AI Score5.4

CVSS 3.17.5

CVSS 46.9

EPSS0.00019

SSVC