# CVE-2026-42371: uriparser: uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length...

CVE-2026-42371 is fixed in 65 products on 1 platform, first by DEBIAN-CVE-2026-42371, released April 27, 2026. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2026-42371
- Priority: Routine
- CVSS: 5.1 (medium)
- EPSS: 0.0017
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Apr 27, 2026

## Description

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | mingw32-uriparser Fedora 43 | 1.0.2-1.fc43 | [FEDORA-2026-AA5877C5BA](https://patchblox.com/security/data/fix/linux/fedora-2026-aa5877c5ba.md) | May 11, 2026 |
| Linux | mingw32-uriparser-debuginfo Fedora 43 | 1.0.2-1.fc43 | [FEDORA-2026-AA5877C5BA](https://patchblox.com/security/data/fix/linux/fedora-2026-aa5877c5ba.md) | May 11, 2026 |
| Linux | mingw64-uriparser Fedora 43 | 1.0.2-1.fc43 | [FEDORA-2026-AA5877C5BA](https://patchblox.com/security/data/fix/linux/fedora-2026-aa5877c5ba.md) | May 11, 2026 |
| Linux | mingw64-uriparser-debuginfo Fedora 43 | 1.0.2-1.fc43 | [FEDORA-2026-AA5877C5BA](https://patchblox.com/security/data/fix/linux/fedora-2026-aa5877c5ba.md) | May 11, 2026 |
| Linux | php8.5 amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-bcmath amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-bcmath-debuginfo amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-cli amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-cli-debuginfo amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-common amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-common-debuginfo amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-dba amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-dba-debuginfo amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-dbg amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-dbg-debuginfo amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-debuginfo amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-debugsource amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-devel amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-embedded amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-embedded-debuginfo amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-enchant amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-enchant-debuginfo amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-ffi amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-ffi-debuginfo amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-fpm amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-fpm-debuginfo amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-gd amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-gd-debuginfo amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-gmp amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-gmp-debuginfo amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-intl amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-intl-debuginfo amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-ldap amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-ldap-debuginfo amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-mbstring amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-mbstring-debuginfo amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-modphp amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-modphp-debuginfo amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-mysqlnd amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-mysqlnd-debuginfo amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-odbc amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-odbc-debuginfo amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-pdo amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-pdo-debuginfo amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-pgsql amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-pgsql-debuginfo amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-process amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-process-debuginfo amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-snmp amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-snmp-debuginfo amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-soap amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-soap-debuginfo amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-sodium amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-sodium-debuginfo amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-tidy amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-tidy-debuginfo amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-xml amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-xml-debuginfo amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-zip amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | php8.5-zip-debuginfo amzn 2023 | 8.5.6-1.amzn2023.0.1 | [ALAS2023-2026-1733](https://patchblox.com/security/data/fix/linux/alas2023-2026-1733.md) | May 25, 2026 |
| Linux | uriparser Debian 14 | 1.0.1+dfsg-1 | [DEBIAN-CVE-2026-42371](https://patchblox.com/security/data/fix/linux/debian-cve-2026-42371.md) | Apr 27, 2026 |
| Linux | uriparser Fedora 43 | 1.0.2-1.fc43 | [FEDORA-2026-AA5877C5BA](https://patchblox.com/security/data/fix/linux/fedora-2026-aa5877c5ba.md) | May 11, 2026 |
| Linux | uriparser opensuse-leap 16.0 | 0.9.8-160000.5.1 | [OPENSUSE-SU-2026:21297-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21297-1.md) | Jul 10, 2026 |
| Linux | uriparser sles 15.7 | 0.8.5-150000.3.14.1 | [SUSE-SU-2026:3021-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3021-1.md) | Jul 15, 2026 |
| Linux | uriparser sles 16.0 | 0.9.8-160000.5.1 | [SUSE-SU-2026:22627-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22627-1.md) | Jul 10, 2026 |
| Linux | uriparser-debuginfo Fedora 43 | 1.0.2-1.fc43 | [FEDORA-2026-AA5877C5BA](https://patchblox.com/security/data/fix/linux/fedora-2026-aa5877c5ba.md) | May 11, 2026 |
| Linux | uriparser-debugsource Fedora 43 | 1.0.2-1.fc43 | [FEDORA-2026-AA5877C5BA](https://patchblox.com/security/data/fix/linux/fedora-2026-aa5877c5ba.md) | May 11, 2026 |
| Linux | uriparser-devel Fedora 43 | 1.0.2-1.fc43 | [FEDORA-2026-AA5877C5BA](https://patchblox.com/security/data/fix/linux/fedora-2026-aa5877c5ba.md) | May 11, 2026 |
| Linux | uriparser-doc Fedora 43 | 1.0.2-1.fc43 | [FEDORA-2026-AA5877C5BA](https://patchblox.com/security/data/fix/linux/fedora-2026-aa5877c5ba.md) | May 11, 2026 |

---

Data as of 2026-11-08T06:59:42Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.