CyberSecBulletin

Mapbox vulnerabilities

We track 2 vulnerabilities in Mapbox products across 3 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 11, 2026.

2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score

Latest Mapbox vulnerabilities

  • 8.1 High severity

    node-fontnik: Integer Overflow or Wraparound

    CVE-2026-63660Mapbox

    node-fontnik is a library that delivers a range of glyphs rendered as SDFs (signed distance fields) in a protocol buffer. Prior to version 0.7.7, a crafted font could trigger a heap out-of-bounds write in RenderSDF (include/mapbox/glyph_foundry_impl.hpp). Rend

  • 7.5 High severity

    Mapbox: Integer Overflow or Wraparound

    CVE-2022-38216Mapbox

    An integer overflow exists in Mapbox's closed source gl-native library prior to version 10.6.1, which is bundled with multiple Mapbox products including open source libraries. The overflow is caused by large image height and width values when creating a new Im