Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2026-36189

Опубликовано: 21 мая 2026
Источник: debian
EPSS Низкий

Описание

Buffer Overflow vulnerability in Uncrustify Project Affected v.Uncrustify_d-0.82.0-132-bcc41cbdc and Fixed in commit 68e67b9a1435a1bb173b106fedb4a4f510972bdc allows a local attacker to cause a denial of service via the check_template.cpp, check_template function, tokenize_cleanup function, uncrustify executable components

Пакеты

ПакетСтатусВерсия исправленияРелизТип
uncrustifyunfixedpackage

Примечания

  • https://github.com/uncrustify/uncrustify/issues/4636

  • https://github.com/uncrustify/uncrustify/pull/4641

  • https://github.com/uncrustify/uncrustify/pull/4650

  • tokenizer related code moved to subfolder in:

  • https://github.com/uncrustify/uncrustify/commit/35f4eb550fd0cb419d0d48575c51b1d19def18fa (uncrustify-0.79.0)

  • Fixed by: https://github.com/uncrustify/uncrustify/commit/04e7614fd25d283508d6d68d85006d9b420c0f1a (uncrustify-0.83.0)

  • Crash in CLI tool, no security impact

EPSS

Процентиль: 3%
0.00134
Низкий

Связанные уязвимости

CVSS3: 6.2
ubuntu
3 месяца назад

Buffer Overflow vulnerability in Uncrustify Project Affected v.Uncrustify_d-0.82.0-132-bcc41cbdc and Fixed in commit 68e67b9a1435a1bb173b106fedb4a4f510972bdc allows a local attacker to cause a denial of service via the check_template.cpp, check_template function, tokenize_cleanup function, uncrustify executable components

CVSS3: 6.2
nvd
3 месяца назад

Buffer Overflow vulnerability in Uncrustify Project Affected v.Uncrustify_d-0.82.0-132-bcc41cbdc and Fixed in commit 68e67b9a1435a1bb173b106fedb4a4f510972bdc allows a local attacker to cause a denial of service via the check_template.cpp, check_template function, tokenize_cleanup function, uncrustify executable components

CVSS3: 6.2
github
3 месяца назад

Buffer Overflow vulnerability in Uncrustify Project Affected v.Uncrustify_d-0.82.0-132-bcc41cbdc and Fixed in commit 68e67b9a1435a1bb173b106fedb4a4f510972bdc allows a local attacker to cause a denial of service via the check_template.cpp, check_template function, tokenize_cleanup function, uncrustify executable components

EPSS

Процентиль: 3%
0.00134
Низкий