https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-09T04:58:57.623315+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-88359 fkie_cve-2026-88359 2026-10-09T04:58:57.625249+00:00

libfyaml 0.9.6 contains a stack exhaustion vulnerability in fy_atom_iter_format(). When processing a specially crafted YAML document containing a very large literal or folded block scalar, the function repeatedly grows an internal buffer using alloca() inside a loop. The allocated stack memory is not released until the function returns, causing cumulative stack growth that can exceed the process stack limit and result in SIGSEGV and denial of service.

 https://vulnerability.circl.lu/vuln/ghsa-3qj9-89fg-m5cw GHSA-3qj9-89fg-m5cw 2026-10-09T04:58:57.625330+00:00

libfyaml 0.9.6 contains a stack exhaustion vulnerability in fy_atom_iter_format(). When processing a specially crafted YAML document containing a very large literal or folded block scalar, the function repeatedly grows an internal buffer using alloca() inside a loop. The allocated stack memory is not released until the function returns, causing cumulative stack growth that can exceed the process stack limit and result in SIGSEGV and denial of service.

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-88359 UBUNTU-CVE-2026-88359 2026-10-09T04:58:57.625356+00:00

Affected: Ubuntu:22.04:LTS: libfyaml, Ubuntu:24.04:LTS: libfyaml, Ubuntu:26.04:LTS: libfyaml

libfyaml 0.9.6 contains a stack exhaustion vulnerability in fy_atom_iter_format(). When processing a specially crafted YAML document containing a very large literal or folded block scalar, the function repeatedly grows an internal buffer using alloca() inside a loop. The allocated stack memory is not released until the function returns, causing cumulative stack growth that can exceed the process stack limit and result in SIGSEGV and denial of service.