CVE-2026-88370

libconfini 1.16.4 contains a heap out-of-bounds write condition involving the bundled loadinibuffer.h utility and stripinicache. The bundled utility allocates exactly inilength bytes, while stripinicache unconditionally writes a NUL terminator at inisourceinilength, requiring an additional writab...

EUVD-2026-86269

libconfini 1.16.4 contains a heap out-of-bounds write condition involving the bundled loadinibuffer.h utility and stripinicache. The bundled utility allocates exactly inilength bytes, while stripinicache unconditionally writes a NUL terminator at inisourceinilength, requiring an additional writab...

CVE-2026-88370

libconfini version 1.16.4 is vulnerable to a heap out-of-bounds write condition. The flaw originates from a mismatch between the bundled load_ini_buffer.h utility and the strip_ini_cache() function. While the utility allocates exactly ini_length bytes, strip_ini_cache() unconditionally writes a N...