This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2026-107168 →

DEBIAN-CVE-2026-107168

A flaw was found in m17n-lib. By providing crafted input containing an invalid UTF-8 character sequence, an attacker can cause the text parsing functi...

Original description

The description as published by the source.

A flaw was found in m17n-lib. By providing crafted input containing an invalid UTF-8 character sequence, an attacker can cause the text parsing function to enter an infinite loop. This issue leads to sustained high CPU utilization, resulting in a Denial of Service (DoS) for the affected application.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 m17n-lib

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 m17n-lib

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 m17n-lib

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

References

advisory security-tracker.debian.org