Vulnerability · Published Oct 27, 2026 · Assigned by VulDB
CVE-2026-116620Tencent RapidJSON Regex stream.h Take out-of-bounds
High 7.3
In plain English
A high-severity out-of-bounds read in RapidJSON from Tencent. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities).
Official description
A security vulnerability has been detected in Tencent RapidJSON up to 1.1.0. This issue affects the function GenericStringStream<UTF8<char>>::Take in the library include/rapidjson/stream.h of the component Regex Parser. The manipulation leads to out-of-bounds read. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | rapidjson | no fix listed | DEBIAN-CVE-2026-116620 |
| Debian:13 | rapidjson | no fix listed | DEBIAN-CVE-2026-116620 |
| Debian:14 | rapidjson | no fix listed | DEBIAN-CVE-2026-116620 |
| Ubuntu:26.04:LTS | rapidjson | no fix listed | UBUNTU-CVE-2026-116620 |
| Ubuntu:26.10 | rapidjson | no fix listed | UBUNTU-CVE-2026-116620 |
Affected products (as reported)
Weakness: CWE-125, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C
References
- VDB-426552 | Tencent RapidJSON Regex stream.h Take out-of-bounds vdb-entry, technical-description
- VDB-426552 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- CVE-2026-116620 | CVE Analysis and Report third-party-advisory
- Submit #1024236 | tencent RapidJSON 1.1.0 Buffer Overflow third-party-advisory
- https://github.com/Tencent/rapidjson/issues/2401 exploit, issue-tracking
- https://github.com/Tencent/rapidjson/ product