This vulnerability in musl libc affects versions 0.7.10 through 1.2.6 and arises from an incorrect control flow implementation (CWE-670) in the qsort function. Specifically, stack-based memory corruption can occur when sorting very large arrays (exceeding approximately seven million elements on 32-bit systems) due to mishandling of double-word primitives. The vulnerability has a CVSS 3.1 score of 8.1, indicating high severity, with attack vector local, high attack complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. No patch or official remediation guidance is currently available.

Successful exploitation can lead to stack-based memory corruption, potentially causing arbitrary code execution or denial of service. However, exploitation requires sorting extremely large arrays, which may limit practical attack scenarios. The vulnerability impacts confidentiality, integrity, and availability as per the CVSS vector. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid sorting extremely large arrays with affected musl libc versions or consider using alternative libraries or implementations for such operations.