Skip to main content
VulnerabilityPublished Updated

Libucl: Heap-buffer-overflow

Affects libuclSource GCVE Database

0
Severity
Medium

Rated Medium by Threat Radar's AI analysis

Data as of 31 Oct 2026, 15:38 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzzlibuclpkg:generic/libuclOther threatsAffected
  • 0.8.2 – 0.10.0
  • >=c4fc60ebb0aa695df1e6642770d512adb9f1af4e
7 affected builds		Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should monitor the libucl project and OSS-Fuzz reports for updates and apply any forthcoming patches promptly once available.

Description

A heap-buffer-overflow vulnerability exists in the libucl library within the function ucl_object_dtor_unref_single, as reported by OSS-Fuzz. The issue causes an out-of-bounds read of 8 bytes during object destruction and hash cleanup operations.

References

Community reviews

Loading reviews…