CVE-2026-109854

Publié : 13 octobre 2026

Modifié : 13 octobre 2026

Score CVSS

2.5

LOW

Description détaillée

A flaw was found in m17n-lib. An attacker who supplies crafted input to an application processing ISO-2022 encoded text can cause the library to read uninitialized memory from the stack. If the application exposes or returns the decoded output, this flaw can result in unexpected behavior and limited information disclosure.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Références et Patchs

https://access.redhat.com/security/cve/CVE-2026-109854 https://bugzilla.redhat.com/show_bug.cgi?id=2550285 https://cgit.git.savannah.nongnu.org/cgit/m17n/m17n-lib.git/commit/?id=f3b85087f90189f91c04ba1b62c5f0b879ff2b20 https://lists.gnu.org/archive/html/m17n-list/2026-10/msg00001.html

Dernières Vulnérabilités

CVE-2026-94410

A low privileged remote attacker is able to view a list of roles that should only be accessible to administrators. This results in a low level of confidentiality breach, as no particularly sensitive information is affected.

VOIR DÉTAILS

CVE-2026-89279

Cross-Site request forgery (CSRF) vulnerability in AuthTake Technology Inc. Authtake allows Encryption Brute Forcing. This issue affects authtake: from v1.3 before v1.4.

VOIR DÉTAILS

CVE-2026-63316

A SQL injection vulnerability has been identified in Payload CMS. Improper neutralization of input provided by user into "in" and "not_in" query paramethers allows an authenticated attacker to perform SQL Injection attacks. This issue was fixed in version 3.90.0 and 4.0.0-canary.34.

VOIR DÉTAILS