CVE-2025-11010 vstakhov libucl ucl_util.c ucl_include_common heap-based overflow

A vulnerability has been found in vstakhov libucl up to 0.9.2. Affected by this vulnerability is the function uclincludecommon of the file /src/uclutil.c. Such manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the...

CVE-2025-11010

CVE-2025-11010 affects vstakhov/libucl up to 0.9.2. The vulnerability lies in the function ucl_include_common in src/ucl_util.c, causing a heap-based buffer overflow. Local access is required to exploit, and public exploit details have been disclosed. Various sources confirm impact on libucl and ...

CVE-2025-11010 vstakhov libucl ucl_util.c ucl_include_common heap-based overflow

A vulnerability has been found in vstakhov libucl up to 0.9.2. Affected by this vulnerability is the function uclincludecommon of the file /src/uclutil.c. Such manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the...

libucl security vulnerabilities

libucl is a C general configuration library parser by the individual developer Vsevolod Stakhov. A security vulnerability exists in libucl 0.9.2 and earlier versions, which stems from a heap buffer overflow in the function uclincludecommon in the file /src/uclutil.c, which could lead to the...

CVE-2025-11010: Heap-based Buffer Overflow

A vulnerability has been found in vstakhov libucl up to 0.9.2. Affected by this vulnerability is the function uclincludecommon of the file /src/uclutil.c. Such manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the...

libucl:ucl_add_string_fuzzer: Crash in ucl_include_common

Detailed Report: https://oss-fuzz.com/testcase?key=4961225115303936 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerubsanlibucl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00010000002e Crash State: uclincludecommon uclincludehandler...

libucl:ucl_add_string_fuzzer: Heap-use-after-free in ucl_object_iterate_full

Detailed Report: https://oss-fuzz.com/testcase?key=5147241645998080 Project: libucl Fuzzing Engine: afl Fuzz Target: ucladdstringfuzzer Job Type: aflasanlibucl Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x6060000018ae Crash State: uclobjectiteratefull...