31 matches found
CVE-2025-6499
CVE-2025-6499 affects vstakhov libucl up to 0.9.2. The vulnerable component is the function ucl_parse_multiline_string in src/ucl_parser.c, with a heap-based buffer overflow caused by improper handling of multiline strings. Local access is required to exploit, and public disclosures exist. Some s...
CVE-2025-6499 vstakhov libucl ucl_parser.c ucl_parse_multiline_string heap-based overflow
A vulnerability classified as problematic was found in vstakhov libucl up to 0.9.2. Affected by this vulnerability is the function uclparsemultilinestring of the file src/uclparser.c. The manipulation leads to heap-based buffer overflow. The attack needs to be approached locally. The exploit has...
CVE-2025-6499 vstakhov libucl ucl_parser.c ucl_parse_multiline_string heap-based overflow
A vulnerability classified as problematic was found in vstakhov libucl up to 0.9.2. Affected by this vulnerability is the function uclparsemultilinestring of the file src/uclparser.c. The manipulation leads to heap-based buffer overflow. The attack needs to be approached locally. The exploit has...
PT-2025-26577 · Vstakhov · Libucl
Name of the Vulnerable Software and Affected Versions: vstakhov libucl versions up to 0.9.2 Description: A problematic vulnerability was found in the vstakhov libucl, affecting the function ucl parse multiline string of the file src/ucl parser.c. This vulnerability leads to a heap-based buffer...
libucl 安全漏洞
libucl is a C general configuration library parser from the individual developer Vsevolod Stakhov. A security vulnerability exists in libucl 0.9.2 and earlier versions, which stems from a heap buffer overflow in the uclparsemultilinestring function in the src/uclparser.c file...
libucl:ucl_add_string_fuzzer: Crash in kh_get_ucl_hash_node
Detailed Report: https://oss-fuzz.com/testcase?key=5281773624492032 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerubsanlibucl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00d89fe4d5e4 Crash State: khgetuclhashnode uclhashsearch...
libucl:ucl_add_string_fuzzer: Crash with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=6498000277602304 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerubsanlibucl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000ec99ae8 Crash State: NULL Sanitizer: undefined UBSAN...
libucl:ucl_add_string_fuzzer: Heap-buffer-overflow in ucl_expand_variable
Detailed Report: https://oss-fuzz.com/testcase?key=5469837653180416 Project: libucl Fuzzing Engine: honggfuzz Fuzz Target: ucladdstringfuzzer Job Type: honggfuzzasanlibucl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x61d00000122d Crash State: uclexpandvariable...
libucl:ucl_add_string_fuzzer: Heap-buffer-overflow in ucl_maybe_parse_number
Detailed Report: https://oss-fuzz.com/testcase?key=5741910661791744 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash Address: 0x61c000000f9e Crash State: uclmaybeparsenumber...
libucl:ucl_add_string_fuzzer: Heap-buffer-overflow in ucl_parse_value
Detailed Report: https://oss-fuzz.com/testcase?key=5673037858078720 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6040000002f4 Crash State: uclparsevalue...
libucl:ucl_add_string_fuzzer: Heap-buffer-overflow in ucl_lex_json_string
Detailed Report: https://oss-fuzz.com/testcase?key=5643278969208832 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6020000000b2 Crash State: ucllexjsonstring...