Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-107168 →

DEBIAN-CVE-2026-107168

A flaw was found in m17n-lib. By providing crafted input containing an invalid UTF-8 character sequence, an attacker can cause the text parsing functi...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

A flaw was found in m17n-lib. By providing crafted input containing an invalid UTF-8 character sequence, an attacker can cause the text parsing function to enter an infinite loop. This issue leads to sustained high CPU utilization, resulting in a Denial of Service (DoS) for the affected application.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 m17n-lib

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 m17n-lib

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 m17n-lib

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Références

advisory security-tracker.debian.org