Integer Overflow Vulnerability in CorvusSKK Dictionary Management
CVE-2026-76149

4.6MEDIUM

Key Information:

Vendor

Sasaki Nobuyuki

Status
Corvusskk
Vendor
CVE Published:
26 August 2026

What is CVE-2026-76149?

CorvusSKK, a tool for managing dictionary files, presents a vulnerability due to an integer overflow. This issue could lead to the potential manipulation of dictionary file contents by allowing attackers to write harmful data, thereby compromising the integrity of the application.

Affected Version(s)

CorvusSKK 0 < 3.3.4

References

https://github.com/nathancorvussolis/corvusskk/releases/t...
https://jvn.jp/en/jp/JVN18496672/

CVSS V4

Score:
4.6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

CVSS V3.0

Score:
4.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.