Skip to content
NewA calmer, faster ZeroHour

musl libc regcomp integer overflows may cause heap out-of-bounds writes

Original title: CVE-2026-107891: musl libc: multiple integer overflow in regcomp, possibly leading to incorrect allocation sizes and out-of-bounds heap writes

Lobsters · securityby openwall.com via dzwdz ()1 min read
Part of a story covered by 2 sourcesmusl libc regcomp integer overflows may cause heap writesMerged summary & timeline
AI summary · x-ai/grok-4.7Summaries by Vani AI

CVE-2026-107891 covers multiple overflows that can yield wrong allocation sizes; no fix is stated.

An oss-security item is titled as CVE-2026-107891 in musl libc: multiple integer overflows in regcomp that may produce incorrect allocation sizes and out-of-bounds heap writes. The fetched body is Openwall site navigation, not the vulnerability write-up, so versions, a patch, and exploitation status are not available.

Unconfirmed: Only the title is substantive; affected versions, a fix, and exploitation are not in the text.

Key facts
  • The flaw is described in musl libc regcomp.
  • Overflows may lead to incorrect allocation sizes.
  • The result named in the title is out-of-bounds heap writes.
Security assessment · AI, from the article

Impact: Incorrect allocation sizes and out-of-bounds heap writes

ProductAffected
musl libc—
Analyze CVE-2026-107891 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-107891
———

From the original article

1 min read at openwall.com
Lobsters · security

By openwall.com via dzwdz · openwall.com

Read the full article at Lobsters · security

This source shares headlines only. Summary, key facts and assessment above are AI-written from the article and can be wrong.