Integer Overflow or Wraparound in GitLab
Affects Microsoft Security Response Center MicrosoftSource GCVE Database
Not known to be exploited.
Data as of 10/25/2026, 12:17:55 UTC
Rated by Threat Radar · CVSS not yet scored by NVD
- Exploitation
Not in CISA KEV, no exploitation reported
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| Microsoft Security Response Center Microsoft | Affected
| Fixed in– |
Description
An integer overflow or wraparound vulnerability has been identified in GitLab version 3.0. This type of vulnerability involves improper handling of integer values, which can lead to unexpected behavior in software. No CVSS score or detailed technical impact information is provided. There is no indication of known exploits in the wild or available patches at this time.
Impact
The impact specifics are not detailed in the provided information. Integer overflow vulnerabilities can potentially lead to unexpected application behavior, including crashes or logic errors, but no confirmed exploitation or impact scenarios are documented. No known exploits in the wild have been reported.
Summary
CVE-2026-110264 describes an integer overflow or wraparound vulnerability in GitLab version 3.0. The vulnerability relates to improper handling of integer values, categorized under CWE-190. No further technical details or exploitation methods are provided in the available data. The vulnerability is reported by Microsoft Security Response Center but lacks a CVSS score and patch information.
Weaknesses
- CWE-190Integer Overflow or Wraparound (opens in a new tab)
Base weaknessLikelihood of exploit: Medium
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.