CVE-2026-40504
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk47th percentile - higher than 47% of all known CVEs
Summary
A heap buffer overflow vulnerability exists in Creolabs Gravity before version 0.9.6 in the gravity_vm_exec function. Attackers can exploit scripts with many string literals at global scope to write out-of-bounds memory.
Risk Assessment
This vulnerability allows arbitrary code execution in applications that evaluate untrusted Gravity scripts, potentially leading to system compromise or data leakage.
Recommendation
Upgrade Creolabs Gravity to version 0.9.6 or later immediately. In the meantime, restrict processing of scripts from untrusted sources.
Original NVD description (English source)
Creolabs Gravity before 0.9.6 contains a heap buffer overflow vulnerability in the gravity_vm_exec function that allows attackers to write out-of-bounds memory by crafting scripts with many string literals at global scope. Attackers can exploit insufficient bounds checking in gravity_fiber_reassign() to corrupt heap metadata and achieve arbitrary code execution in applications that evaluate untrusted scripts.