POSIX wordexp(3) can execute shell commands on untrusted input
musl and macOS libc can still treat some patterns as command substitutions even when WRDE_NOCMD is set.
Stories per day · 30 days
1 RSS
Relatedlibc3heap2integer-overflow2regcomp2c1clang1command-injection1gcc1glibc1language-standards1macos1posix1wordexp1
2 stories, newest first · one card per story
Stories tagged #musl
musl libc regcomp integer overflows may cause heap out-of-bounds writes
CVE-2026-107891 covers multiple overflows that can yield wrong allocation sizes; no fix is stated.