OSV-2026-1070
UNKNOWN READ in bytes1_char_at
No scoreFix available
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=538179114
Crash type: UNKNOWN READ
Crash state:
bytes1_char_at
unicode_word_left
unicode_at_boundary
What each source reports
OSV No score
UNKNOWN READ in bytes1_char_at
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=538179114
Crash type: UNKNOWN READ
Crash state:
bytes1_char_at
unicode_word_left
unicode_at_boundary
- Record
OSV-2026-1070- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mrab-regexPyPI |
Listed versions, plus commit ranges 2026.7.192026.8.122026.8.302026.8.312026.9.1 Show 5 moreShow less2026.9.102026.9.192026.9.22026.9.32026.9.9 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2026-1070 is a vulnerability with no CVSS score yet in mrab-regex, published July 28, 2026. No source lists public exploit code. A source reports a fix.