LOW
d99kris
CVE published 2026-10-14
CVE-2026-49206
The rapidcsv library, a C++ CSV parser, has a vulnerability prior to version 8.99 where integer overflow in iterator arithmetic can cause out-of-bounds access. This issue arises when RemoveColumn, InsertColumn, RemoveRow, InsertRow, and GetColumnNames convert size_t indexes to int before adding them to std::vector iterators, potentially leading to undefined behavior, heap memory corruption, or a crash on [truncated]