musl -libc

Products

ProductCVEsExploitedLatest
musl3–Nov 5, 2026

Exploited and recent CVEs

  • CVE-2026-107891 High 8.1 musl libc before 1.2.7, when an untrusted regular expression is used with regcomp, has multiple integer overflows, possibly leading to incorrect allocation sizes and out-of-bounds heap writes. 0.5%
  • CVE-2026-40200 High 8.1 An issue was discovered in musl libc 0.7.10 through 1.2.6. Stack-based memory corruption can occur during qsort of very large arrays, due to incorrectly implemented double-word primitives. The number 0.2%
  • CVE-2025-26519 High 8.1 musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8. 0.3%