Description
A flaw was found in gix-date. The `gix_date::parse::TimeBuf::as_str` function can generate strings containing invalid non-UTF8 characters. This issue violates the internal safety invariants of the `TimeBuf` component, leading to undefined behavior when these malformed strings are subsequently processed. This could potentially result in application instability or other unforeseen consequences.
Metrics
CVSS 3.1 7.1/10
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| GitoxideLabs | gitoxide | < 0.12.0 |
| Red Hat | Logging Subsystem for Red Hat OpenShift | — |
| Red Hat | Logging Subsystem for Red Hat OpenShift | — |
| Red Hat | Logging Subsystem for Red Hat OpenShift | — |
| Red Hat | Logging Subsystem for Red Hat OpenShift | — |
| Red Hat | Logging Subsystem for Red Hat OpenShift | — |
| Red Hat | Logging Subsystem for Red Hat OpenShift | — |
| Red Hat | Logging Subsystem for Red Hat OpenShift | — |
| Red Hat | Red Hat Enterprise Linux 10 | — |
| Red Hat | Red Hat Enterprise Linux 8 | — |
| Red Hat | Red Hat Enterprise Linux 9 | — |
References
- https://access.redhat.com/security/cve/CVE-2026-0810Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2427057Issue Tracking
- https://crates.io/crates/gix-dateProduct
- https://github.com/GitoxideLabs/gitoxide/issues/2305Exploit, Issue Tracking
- https://rustsec.org/advisories/RUSTSEC-2025-0140.htmlThird Party Advisory
- https://github.com/GitoxideLabs/gitoxide/issues/2305Exploit, Issue Tracking
Timeline
- Published
- Jan 26, 2026
- Last modified
- Nov 5, 2026
- NVD status
- Modified