This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2026-36189 →

DEBIAN-CVE-2026-36189

Buffer Overflow vulnerability in Uncrustify Project Affected v.Uncrustify_d-0.82.0-132-bcc41cbdc and Fixed in commit 68e67b9a1435a1bb173b106fedb4a4f51...

Original description

The description as published by the source.

Buffer Overflow vulnerability in Uncrustify Project Affected v.Uncrustify_d-0.82.0-132-bcc41cbdc and Fixed in commit 68e67b9a1435a1bb173b106fedb4a4f510972bdc allows a local attacker to cause a denial of service via the check_template.cpp, check_template function, tokenize_cleanup function, uncrustify executable components

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 uncrustify

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 uncrustify

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 uncrustify

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

References

advisory security-tracker.debian.org