Integer Overflow Vulnerability in musl libc Affects Multiple Versions

CVE-2026-107891

What is CVE-2026-107891?

The musl libc library prior to version 1.2.7 is susceptible to integer overflow vulnerabilities when handling untrusted regular expressions with the regcomp function. These vulnerabilities can result in erroneous memory allocation sizes, potentially leading to out-of-bounds writes in the heap. This increases the risk of exploitation, affecting application stability and security. It is crucial for developers using affected versions to apply updates promptly to mitigate potential impacts.

References