medium
advisory
musl libc: regcomp integer overflow (CVE-2026-107891)
The regcomp function in musl libc is affected by multiple integer overflow issues which can lead to incorrectly-sized allocations and out-of-bounds heap writes.
CVE search metadata
CVE search record: CVE-2026-107891. KEV: no. Product: musl libc. Brief: musl libc: regcomp integer overflow (CVE-2026-107891). Brief link: https://feed.craftedsignal.io/briefs/2026-10-musl-libc-regcomp-overflow/
Triage facts
Revision 1- Applicability
- musl libc
- Evidence
- Unknown
- Severity
- Medium
- Sources
- 1 public source
- Freshness
- Revision 1Oct 21, 23:37 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- D3Roughly even chance
The regcomp function in musl libc is affected by multiple integer overflow issues. These overflows are triggered by the size and complexity of the regular expression passed to regcomp, potentially leading to incorrect allocation sizes and out-of-bounds heap writes.