Skip to main content
VulnerabilityPublished Updated

Libucl: Heap-buffer-overflow

Affects libuclSource GCVE Database

0
Severity
Medium

Rated Medium by Threat Radar's AI analysis

Data as of 1 Nov 2026, 15:14 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzzlibuclpkg:generic/libuclOther threatsAffected
  • 0.8.2 – 0.10.0
  • >=c4fc60ebb0aa695df1e6642770d512adb9f1af4e
7 affected builds		Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users of libucl versions 0.8.2, 0.9.0 to 0.9.4, and 0.10.0 should monitor official libucl sources or OSS-Fuzz reports for updates or patches addressing this heap-buffer-overflow vulnerability.

Description

A heap-buffer-overflow vulnerability exists in the libucl library within the function ucl_object_dtor_unref_single. This issue was identified by OSS-Fuzz and involves an out-of-bounds read of 8 bytes during object destruction.

References

Community reviews

Loading reviews…