Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-109854

M17n-lib: uninitialized stack read in iso-2022 compound text utf-8 decoding

A flaw was found in m17n-lib. An attacker who supplies crafted input to an application processing ISO-2022 encoded text can cause the library to read uninitialized memory from the stack. If the application exposes or returns the decoded output, this flaw can result in unexpected behavior and limited information disclosure.

CVSS 3.1 · 2.5 Low EPSS < 1% KEV · Not listed
Vendors
M17n-lib Red Hat Redhat
Products
M17n-lib Enterprise Linux Enterprise Linux and 1 more
CVE-2026-107170

M17n-lib: null dereference in minput_open_im() after failed m17n_init()

A flaw was found in m17n-lib. A partial failure during library initialization can leave an internal driver pointer uninitialized. Under specific error conditions, such as system resource exhaustion or database corruption, an application attempting to open an input method dereferences this null pointer without proper validation. This issue causes the application to crash, resulting in a Denial of Service (DoS).

CVSS 3.1 · 2.9 Low EPSS < 1% KEV · Not listed
Vendors
M17n-lib Redhat
Products
M17n-lib Enterprise Linux Rhel Els
CVE-2026-107168

M17n-lib: parser infinite loop on malformed utf-8 in count_utf_8_chars()

A flaw was found in m17n-lib. By providing crafted input containing an invalid UTF-8 character sequence, an attacker can cause the text parsing function to enter an infinite loop. This issue leads to sustained high CPU utilization, resulting in a Denial of Service (DoS) for the affected application.

CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
M17n-lib Redhat
Products
M17n-lib Enterprise Linux Rhel Els