CVE-2026-88359

libfyaml 0.9.6 contains a stack exhaustion vulnerability in fyatomiterformat. When processing a specially crafted YAML document containing a very large literal or folded block scalar, the function repeatedly grows an internal buffer using alloca inside a loop. The allocated stack memory is not...

EUVD-2026-85909

libfyaml 0.9.6 contains a stack exhaustion vulnerability in fyatomiterformat. When processing a specially crafted YAML document containing a very large literal or folded block scalar, the function repeatedly grows an internal buffer using alloca inside a loop. The allocated stack memory is not...

CVE-2026-88359

The libfyaml library version 0.9.6 is vulnerable to a stack exhaustion vulnerability within the fy_atom_iter_format() function. The root cause is the repeated use of alloca() inside a loop when processing a specially crafted YAML document containing very large literal or folded block scalars. Bec...