CVE-2026-29795 Details
Description
stellar-xdr is a library and CLI containing types and functionality for working with Stellar XDR. Prior to version 25.0.1, StringM::from_str does not validate that the input length is within the declared maximum (MAX). Calling StringM::<N>::from_str(s) where s is longer than N bytes succeeds and returns an Ok value instead of Err(Error::LengthExceedsMax), producing a StringM that violates its length invariant. This affects any code that constructs StringM values from string input using FromStr (including str::parse), and relies on the type's maximum length constraint being enforced. An oversized StringM could propagate through serialization, validation, or other logic that assumes the invariant holds. This issue has been patched in version 25.0.1.
A vulnerability exists in the Stellar XDR library version 25.0.0 and prior, where the StringM::from_str method fails to properly validate the length of input strings against a declared maximum. This oversight allows strings longer than the specified limit to be accepted, creating StringM instances that violate their length constraints. The issue affects any code that generates StringM values from string input using the FromStr trait, including the str::parse function. The resulting oversized StringM could disrupt serialization, validation, or other processes that assume the length invariant is maintained.
Users are advised to upgrade to Stellar XDR version 25.0.1 or later, where this vulnerability has been fixed. Alternatively, StringM values can be constructed using the StringM::try_from method, which enforces the length constraints correctly.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Mar 9, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/stellar/rs-stellar-xdr/commit/1f840013c3e2fca0321fb844b048afa01d10dda6 | [email protected] | Patch |
| https://github.com/stellar/rs-stellar-xdr/issues/499 | [email protected] | Issue Tracking |
| https://github.com/stellar/rs-stellar-xdr/pull/500 | [email protected] | Issue TrackingPatch |
| https://github.com/stellar/rs-stellar-xdr/security/advisories/GHSA-x57h-xx53-v53w | [email protected] | MitigationPatchVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-770 | Allocation of Resources Without Limits or Throttling | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| stellar stellar-xdr | < 25.0.1 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Mar 18, 2026 | Initial Analysis | [email protected] |
| Mar 6, 2026 | New CVE Received | [email protected] |