Intel

AIKIDO-2026-10226

capnp is vulnerable to Integer Overflow

Integer Overflow Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
Published Feb 22, 2026

43

Medium Risk

This Affects:

RUSTcapnp
0.0.1 - 0.25.0
Fixed in 0.25.1
Are you affected? Scan for Free

TL;DR

Affected versions of this package are vulnerable to multiple integer overflow issues in the message construction logic.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range.

Background info

capnp is vulnerable to Integer Overflow in versions 0.0.1 - 0.25.0.

How to fix this

Upgrade the capnp library to the patch version.