A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a valid value alongside its… (CVE-2026-108063)

The libhangul library has a flaw in its handling of Hanja dictionary files where it does not verify that each dictionary entry contains a valid value alongside its key. An attacker can exploit this by supplying a specially crafted dictionary file to an application that uses libhangul for querying these files. This causes the application to crash unexpectedly, resulting in a denial of service condition. The vulnerability affects specific versions of libhangul as listed, with no known exploits in the wild and no vendor advisory or patch information provided.

The vulnerability allows an attacker with local access to cause an application using libhangul to crash by providing malformed Hanja dictionary files. This results in a denial of service, impacting application availability. There is no indication of confidentiality or integrity impact. The CVSS 3.1 score is 5.5, reflecting a medium severity primarily due to the availability impact and the requirement for local attack vector with user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid using untrusted Hanja dictionary files with applications relying on libhangul to prevent triggering the denial of service condition.