CVE-2026-109854

Description

A flaw was found in m17n-lib. An attacker who supplies crafted input to an application processing ISO-2022 encoded text can cause the library to read uninitialized memory from the stack. If the application exposes or returns the decoded output, this flaw can result in unexpected behavior and limited information disclosure.

References

https://lists.gnu.org/archive/html/m17n-list/2026-10/msg00001.html

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98377

https://cgit.git.savannah.nongnu.org/cgit/m17n/m17n-lib.git/commit/?id=f3b85087f90189f91c04ba1b62c5f0b879ff2b20

https://bugzilla.redhat.com/show_bug.cgi?id=2550285

https://access.redhat.com/security/cve/CVE-2026-109854

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3