A flaw in the MiniSat DIMACS file parser allows a local attacker to supply an index value of 2147483648 to the Solver::value function, which then performs an out‑of‑bounds read. The vulnerability does not provide direct code execution but can leak contents of the process memory, potentially revealing sensitive information. The weakness is a classic out‑of‑bounds read, classified as CWE‑119, CWE‑125, and CWE‑787.

The issue affects all builds of niklasso MiniSat up to and including version 2.2.0. Users deploying MiniSat for local SAT solving tasks on their own machines—in particular those parsing user‑supplied DIMACS files—are therefore potentially impacted.

The CVSS score is 4.8, indicating moderate severity, while the EPSS score is less than 1%, showing a very low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. Attackers must have local access to the system to exploit the read, and publicly available proof‑of‑concept code exists. Consequently, the risk is moderate for environments where MiniSat is used with untrusted inputs, but overall exploitation likelihood remains low.