CVE-2026-109854

2.5 LOW

Published 2026-10-13 · Updated 2026-10-16

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

A flaw was found in m17n-lib. An attacker who supplies crafted input to an application processing ISO-2022 encoded text can cause the library to read uninitialized memory from the stack. If the application exposes or returns the decoded output, this flaw can result in unexpected behavior and limited information disclosure.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Weaknesses

CWE-457

All references

https://access.redhat.com/security/cve/CVE-2026-109854
https://bugzilla.redhat.com/show_bug.cgi?id=2550285
https://cgit.git.savannah.nongnu.org/cgit/m17n/m17n-lib.git/commit/?id=f3b85087f90189f91c04ba1b62c5f0b879ff2b20
https://lists.gnu.org/archive/html/m17n-list/2026-10/msg00001.html

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

HIGHCVE-2026-100759
MEDIUMCVE-2026-100783
MEDIUMCVE-2026-100799
MEDIUMCVE-2026-100802
MEDIUMCVE-2026-100806
HIGHCVE-2026-102717PoC
LOWCVE-2026-103436PoC
MEDIUMCVE-2026-109828PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.