musl libc regcomp integer overflows may cause heap out-of-bounds writes
CVE-2026-107891 covers multiple overflows that can yield wrong allocation sizes; no fix is stated.
Stories per day · 30 days
1 RSS
6 stories, newest first · one card per story
Stories tagged #heap
musl libc regcomp overflows can cause heap writes (CVE-2026-107891)
Overflow conditions depend on the size and complexity of the regular expression passed to regcomp.
[NotCVE-2026-0018] game-music-emu (libgme) through 0.6.5 Unbounded GYM Command Loop Allows Heap Out-of-Bounds Read
libgme through 0.6.5 can leak heap memory when playing a crafted GYM file.
OpenSSL Fixes High-Severity Bug That Can Leak Server Memory in Plaintext
OpenSSL patched CVE-2026-84782, a high-severity DTLS flaw that can leak heap memory or crash servers.
[NotCVE-2026-0019] game-music-emu through 0.6.5 VGM Command Interpreter Missing Operand Length Check Allows Heap Out-of-Bounds Read
game-music-emu through 0.6.5 can leak heap memory when parsing a crafted VGM or VGZ file.
CVE-2026-74766: Net::IDN::Punycode versions from 2.301 before 2.590 for Perl allow a heap use-after-free via a decoded code point that reallocates the output buffer in decode_punycode
Perl Net::IDN::Punycode before 2.590 has a heap use-after-free when decode_punycode reallocates its buffer.