Musl-libc vulnerabilities
We track 3 vulnerabilities in Musl-libc products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 5, 2026.
Latest Musl-libc vulnerabilities
- 8.1 High severity
musl: Integer Overflow or Wraparound
musl libc before 1.2.7, when an untrusted regular expression is used with regcomp, has multiple integer overflows, possibly leading to incorrect allocation sizes and out-of-bounds heap writes.
- 8.1 High severity
musl: Always-Incorrect Control Flow Implementation
An issue was discovered in musl libc 0.7.10 through 1.2.6. Stack-based memory corruption can occur during qsort of very large arrays, due to incorrectly implemented double-word primitives. The number of elements must exceed about seven million, i.e., the 32nd
- 7.0 High severity
musl: Out-of-bounds Write
musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.