CVE-2026-107891 security flaw

Posted by Rich Felker on Oct 21 CVE-2026-107891: musl libc: multiple integer overflow in regcomp, possibly leading to incorrect allocation sizes and out-of-bounds heap writes Overview: The regcomp function in musl libc is affected by multiple integer overflow issues which can lead to incorrectly-sized allocations and possibly out-of-bounds heap writes. The conditions for overflow are triggered by the size and complexity of the regular expression passed to regcomp, not the...

Published 21-Oct-2026 17:00 UTC · First seen 21-Oct-2026 16:59 UTC

Sources

• Open Source Security · 21-Oct-2026