CVE-2025-11010: Heap-based Buffer Overflow

A vulnerability has been found in vstakhov libucl up to 0.9.2. Affected by this vulnerability is the function uclincludecommon of the file /src/uclutil.c. Such manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the...

libucl:ucl_add_string_fuzzer: Heap-use-after-free in kh_put_ucl_hash_node

Project: https://github.com/vstakhov/libucl.git Detailed Report: https://oss-fuzz.com/testcase?key=6033759330959360 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

Malicious code in libucl (npm)

The package libucl was found to contain malicious code...

MAL-2025-25251 Malicious code in libucl (npm)

The package libucl was found to contain malicious code...

CVE-2025-6499

A flaw was found in libucl. The uclparsemultilinestring function in src/uclparser.c is vulnerable to a heap-based buffer overflow due to improper bounds checking during multiline string parsing. This flaw allows a local attacker to trigger this overflow by providing a specially crafted input file...

CVE-2025-6499

A vulnerability classified as problematic was found in vstakhov libucl up to 0.9.2. Affected by this vulnerability is the function uclparsemultilinestring of the file src/uclparser.c. The manipulation leads to heap-based buffer overflow. The attack needs to be approached locally. The exploit has...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the uclparsemultilinestring function. An attacker with local access can cause a lack of system availability by providing specially crafted input to this function during parsing operations. Remediation A fi...

CVE-2025-6499 vstakhov libucl ucl_parser.c ucl_parse_multiline_string heap-based overflow

A vulnerability classified as problematic was found in vstakhov libucl up to 0.9.2. Affected by this vulnerability is the function uclparsemultilinestring of the file src/uclparser.c. The manipulation leads to heap-based buffer overflow. The attack needs to be approached locally. The exploit has...

CVE-2025-6499

CVE-2025-6499 affects vstakhov libucl up to 0.9.2. The vulnerable component is the function ucl_parse_multiline_string in src/ucl_parser.c, with a heap-based buffer overflow caused by improper handling of multiline strings. Local access is required to exploit, and public disclosures exist. Some s...

CVE-2025-6499 vstakhov libucl ucl_parser.c ucl_parse_multiline_string heap-based overflow

A vulnerability classified as problematic was found in vstakhov libucl up to 0.9.2. Affected by this vulnerability is the function uclparsemultilinestring of the file src/uclparser.c. The manipulation leads to heap-based buffer overflow. The attack needs to be approached locally. The exploit has...

CVE-2025-6499

A vulnerability classified as problematic was found in vstakhov libucl up to 0.9.2. Affected by this vulnerability is the function uclparsemultilinestring of the file src/uclparser.c. The manipulation leads to heap-based buffer overflow. The attack needs to be approached locally. The exploit has...

CVE-2025-6499 vstakhov libucl ucl_parser.c ucl_parse_multiline_string heap-based overflow

A vulnerability classified as problematic was found in vstakhov libucl up to 0.9.2. Affected by this vulnerability is the function uclparsemultilinestring of the file src/uclparser.c. The manipulation leads to heap-based buffer overflow. The attack needs to be approached locally. The exploit has...

PT-2025-26577

Name of the Vulnerable Software and Affected Versions: vstakhov libucl versions up to 0.9.2 Description: A problematic vulnerability was found in the vstakhov libucl, affecting the function ucl parse multiline string of the file src/ucl parser.c. This vulnerability leads to a heap-based buffer...

libucl 安全漏洞

libucl is a C general configuration library parser from the individual developer Vsevolod Stakhov. A security vulnerability exists in libucl 0.9.2 and earlier versions, which stems from a heap buffer overflow in the uclparsemultilinestring function in the src/uclparser.c file...

CVE-2025-6499: Heap-based Buffer Overflow

A vulnerability classified as problematic was found in vstakhov libucl up to 0.9.2. Affected by this vulnerability is the function uclparsemultilinestring of the file src/uclparser.c. The manipulation leads to heap-based buffer overflow. The attack needs to be approached locally. The exploit has...

libucl:ucl_add_string_fuzzer: Heap-use-after-free in ucl_hash_search

Project: https://github.com/vstakhov/libucl.git Detailed Report: https://oss-fuzz.com/testcase?key=4714747683733504 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

libucl:ucl_add_string_fuzzer: Heap-use-after-free in kh_put_ucl_hash_node

Detailed Report: https://oss-fuzz.com/testcase?key=4802895013019648 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x50c000007660 Crash State: khputuclhashnode...

libucl:ucl_add_string_fuzzer: Object-size in ucl_array_append

Detailed Report: https://oss-fuzz.com/testcase?key=6187069154328576 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerubsanlibucl Platform Id: linux Crash Type: Object-size Crash Address: Crash State: uclarrayappend uclparsergetcontainer uclstatemachine...

libucl:ucl_add_string_fuzzer: Heap-use-after-free in kh_put_ucl_hash_node

Project: https://github.com/vstakhov/libucl.git Detailed Report: https://oss-fuzz.com/testcase?key=5737536580550656 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

libucl:ucl_add_string_fuzzer: Heap-use-after-free in kh_put_ucl_hash_node

Project: https://github.com/vstakhov/libucl.git Detailed Report: https://oss-fuzz.com/testcase?key=6078035170492416 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...