Threats affecting pkg:github/madmurphy/libconfini

libconfini version 1.16.4 contains a heap out-of-bounds write vulnerability in its bundled load_ini_buffer.h utility, specifically in the strip_ini_cache() function. The utility allocates memory exactly equal to the INI input length but then writes a null terminator beyond the allocated buffer, causing heap memory corruption. This flaw can lead to a denial of service when processing any non-empty INI input.