POSIX wordexp(3) can execute shell commands on untrusted input
musl and macOS libc can still treat some patterns as command substitutions even when WRDE_NOCMD is set.
44
Product
musl libc
- Mentions · 7d3
- Mentions · 30d3
- All mentions3
- First seenOct 21, 2026
- Last mentioned3h ago
Timeline
3 articles · newest firstmusl libc regcomp integer overflows may cause heap out-of-bounds writes
CVE-2026-107891 covers multiple overflows that can yield wrong allocation sizes; no fix is stated.
52
musl libc regcomp overflows can cause heap writes (CVE-2026-107891)
Overflow conditions depend on the size and complexity of the regular expression passed to regcomp.
48
Related CVEs
by mentionsAppears with
- muslvendor · 2
- macOS libcproduct · 1
- Applevendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.