CVE-2026-109854
LOW
INFO
Priority: 0.00
BB Relevance:
20/100
Published: 2026-10-13
Modified: 2026-11-06
First seen: 2026-11-06
Status: active
Attack Surface
No Auth
CVSS Vector Breakdown
AV:
Local
AC:
High
PR:
None
UI:
Required
S:
Unchanged
C:
Low
I:
None
A:
None
Description
A flaw was found in m17n-lib. An attacker who supplies crafted input to an application processing ISO-2022 encoded text can cause the library to read uninitialized memory from the stack. If the application exposes or returns the decoded output, this flaw can result in unexpected behavior and limited information disclosure.
Weakness Classification (1)
References & Advisories (4)
vdb-entry
x_refsource_REDHAT
issue-tracking
x_refsource_REDHAT