CVE-2026-90715 in Gravity
Summary
by MITRE • 09/14/2026
A security vulnerability has been detected in marcobambini Gravity up to 0.9.7. This affects an unknown function of the file src/utils/gravity_json.c of the component udp json-parser. Such manipulation leads to integer overflow. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. Upgrading to version 0.9.8 mitigates this issue. The name of the patch is 9b337c3eae5833c3956bed1fc01c21c14fd443f2. Upgrading the affected component is recommended.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Analysis
by VulDB Data Team • 09/14/2026
A critical security vulnerability has been identified within the marcobambini Gravity software, specifically affecting versions up to 0.9.7. This flaw resides in the udp json-parser component and impacts an unspecified function located in the source file src/utils/gravity_json.c. The nature of this defect is classified as an integer overflow, a type of error that occurs when an arithmetic operation attempts to create a numeric value that is too large for a computer storage location or data structure to hold. In the context of C-based software like Gravity, such errors often lead to buffer overflows, heap corruption, or logic bypasses because the program fails to properly validate the size of input data before allocating memory or performing calculations based on user-supplied values.
The vulnerability allows for remote exploitation, meaning an attacker does not need physical access or local authentication credentials to trigger the flaw. By sending a specially crafted UDP packet containing malformed JSON data, an adversary can induce the integer overflow condition within the json-parser module. Since the exploit has been disclosed publicly and is known to be functional, automated scanning tools and malicious actors are likely already attempting to leverage this weakness against unpatched systems. The public availability of proof-of-concept code significantly lowers the barrier for entry, increasing the likelihood of successful attacks in the wild compared to vulnerabilities that remain theoretical or require complex multi-stage exploitation techniques.
From a technical perspective, integer overflows in JSON parsing routines are particularly dangerous because they can lead to arbitrary memory writes when combined with subsequent buffer copy operations. If the parser miscalculates the required buffer size due to an overflowed integer, it may allocate insufficient memory while still attempting to write data based on the original, larger intended length. This discrepancy results in writing beyond the bounds of the allocated heap or stack space, potentially overwriting adjacent memory structures such as function pointers, return addresses, or security metadata like canaries. Such corruption can lead to application crashes causing denial of service, but more critically, it enables arbitrary code execution if an attacker carefully crafts the overflowed data to overwrite control flow mechanisms within the process memory space.
The operational impact of this vulnerability is severe for any infrastructure relying on marcobambini Gravity for network management or DNS resolution services that utilize UDP-based JSON communication. Successful exploitation could result in a complete compromise of the host system, granting attackers full administrative privileges over the underlying operating environment. This can lead to data exfiltration, lateral movement within the internal network, and the establishment of persistent backdoors. Furthermore, because the component handles parsing operations likely triggered by external queries or configuration updates, the attack surface is broadened across any service that interacts with this specific UDP endpoint.
To mitigate this risk, immediate action is required to upgrade marcobambini Gravity to version 0.9.8 or later. This updated release incorporates a patch identified by commit hash 9b337c3eae5833c3956bed1fc01c21c14fd443f2, which addresses the underlying integer overflow logic within the gravity_json.c module. The fix likely involves implementing strict bounds checking before arithmetic operations and validating input lengths against maximum allowed thresholds to prevent wraparound conditions. Organizations should prioritize this update across all affected nodes in their deployment environment to eliminate the attack vector entirely.
In terms of industry standard classifications, this vulnerability aligns with CWE-190 Integer Overflow or Wraparound, which describes situations where an integer calculation results in a value that exceeds the maximum limit for its type and wraps around to a smaller number. Additionally, given the remote exploitability and potential for code execution via memory corruption, it relates closely to CWE-787 Out-of-bounds Write if the overflow leads to buffer overruns, or CWE-120 Buffer Copy without Checking Size of Input in C/C++. From an adversarial tactics perspective, this vulnerability facilitates initial access through exploitation of application vulnerabilities as defined by MITRE ATT&CK technique T1190. Security teams should also consider implementing network-level controls such as ingress filtering to restrict UDP traffic from untrusted sources while the patching process is underway, thereby reducing exposure until all systems are secured.