CVE-2026-95124
Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundled load_ini_buffer utility and str
n/a n/a
CVSS
7.5HighExploitationPublic exploit codeCISA's assessment says proof of concept code is public, assessed 15 Oct 2026. Not in the KEV catalogCISA via CVE List
Exploit odds (EPSS)0.49%Chance of exploitation activity in the next 30 days, higher than 41% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version yet
What fixes it
No source in this snapshot names a fixed version.
Description
Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundled load_ini_buffer utility and strip_ini_cache()
Text from CVE List
Affected versions 1
- n/aaffected: n/aCVE List
References 4
- github.com/madmurphy/libconfini/issues/20Exploitvia CVE List
- github.com/madmurphy/libconfini/pull/21Referencevia CVE List
- github.com/madmurphy/libconfini/pull/21/changes/a87afab391b309692ac30bed8eecbdbcdc5fd96fReferencevia CVE List
- gist.github.com/1820893135-pixel/ea24b69099667ea36cef7a72f8c5368aReferencevia CVE List