Threats tagged 'ghsa-gh7m-xpp3-w3vq'

A vulnerability in inih before revision 63 allows a one-byte stack buffer under-read in the ini_parse_stream() function. This occurs when an attacker supplies an INI file or string containing a line of at least INI_MAX_LINE-1 bytes followed by an embedded NUL byte, leading to reading memory out-of-bounds. The issue causes undefined behavior detected by memory sanitizers but does not impact confidentiality or integrity.