The official CVE record is not published yet
Listed from a security news or mailing-list post. Details may change. It will be replaced with the CVE.org / NVD record once published.
musl libc: multiple integer overflow in regcomp, possibly leading to incorrect allocation sizes and out-of-bounds heap writes
Summary
Posted by Rich Felker on Oct 21CVE-2026-107891: musl libc: multiple integer overflow in regcomp, possibly leading to incorrect allocation sizes and out-of-bounds heap writes Overview: The regcomp function in musl libc is affected by multiple integer overflow issues which can lead to incorrectly-size...
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2026-107891 musl
Original description The description as published by the source.
Posted by Rich Felker on Oct 21CVE-2026-107891: musl libc: multiple integer overflow in regcomp, possibly leading to incorrect allocation sizes and out-of-bounds heap writes Overview: The regcomp function in musl libc is affected by multiple integer overflow issues which can lead to incorrectly-sized allocations and possibly out-of-bounds heap writes. The conditions for overflow are triggered by the size and complexity of the regular expression passed to regcomp, not the...
(oss-security (Openwall): CVE-2026-107891: musl libc: multiple integer overflow in regcomp, possibly leading to incorrect allocation sizes and out-of-bounds heap writes)
Source: oss-security (Openwall) NVD