CVE-2026-82737

CVE-2026-82737 is an integer overflow in Ash.Vector.new/1 (lib/ash/vector.ex) in the ash-project ash Elixir library. The dimension field is packed into a 16-bit unsigned integer without a range check, so a vector with more than 65,535 elements wraps modulo 65,536, producing a header that disagree...

EUVD-2026-68964

Integer Overflow or Wraparound vulnerability in ash-project ash lets an attacker corrupt a stored vector and crash later reads of it by submitting a vector with more than 65,535 elements. Ash.Vector.new/1 lib/ash/vector.ex encodes a vector as followed by the element floats, packing the element...

CVE-2026-82737 Ash.Vector wraps the 16-bit dimension header for vectors over 65,535 elements, corrupting data and crashing reads

Integer Overflow or Wraparound vulnerability in ash-project ash lets an attacker corrupt a stored vector and crash later reads of it by submitting a vector with more than 65,535 elements. Ash.Vector.new/1 lib/ash/vector.ex encodes a vector as followed by the element floats, packing the element...