Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-11010 EUVD-2025-31332GHSA-q7r9-4c9w-4548

vstakhov libucl ucl_util.c ucl_include_common heap-based overflow

Published Sep 26, 2025 · Updated Sep 26, 2025 · Assigned by VulDB

Description

A vulnerability has been found in vstakhov libucl up to 0.9.2. Affected by this vulnerability is the function ucl_include_common of the file /src/ucl_util.c. Such manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.

Affected products

VendorProductAffectedFixed
vstakhov libucl 0.9.0, 0.9.1, 0.9.2 —

References