CVE-2026-107891: musl libc: multiple integer overflow in regcomp, possibly leading to incorrect allocation sizes and out-of-bounds heap writes

As cited

Copy frozen at 2026-10-21 18:26 UTC (site build).

vulnerabilities

CVE-2026-107891: musl libc: multiple integer overflow in regcomp, possibly leading to incorrect allocation sizes and out-of-bounds heap writes

CVE-2026-107891 affects the regcomp function in musl libc, where multiple integer overflow issues can produce incorrectly-sized memory allocations and trigger out-of-bounds heap writes. The vulnerability is triggered by crafted regular expressions with specific size and complexity characteristics.

Why it matters: Developers and system administrators using musl libc should evaluate whether their deployments parse untrusted regular expressions, as exploitation could enable remote code execution or memory corruption.

Source published

2026-10-21 15:56 UTC

First seen by Cybersecurity Tracker

2026-10-21 17:25 UTC