{"id":"CVE-2026-95124","title":"Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundled load_ini_buffer utility and strip_ini_cache()","summary":"Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundled load_ini_buffer utility and strip_ini_cache()","severity":"none","published":"2026-10-13","updated":"2026-10-13","sourceUpdated":"2026-10-13T15:17:51.803","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-95124","references":[{"url":"https://gist.github.com/1820893135-pixel/ea24b69099667ea36cef7a72f8c5368a","label":"cve@mitre.org"},{"url":"https://github.com/madmurphy/libconfini/issues/20","label":"cve@mitre.org"},{"url":"https://github.com/madmurphy/libconfini/pull/21","label":"cve@mitre.org"},{"url":"https://github.com/madmurphy/libconfini/pull/21/changes/a87afab391b309692ac30bed8eecbdbcdc5fd96f","label":"cve@mitre.org"}],"tags":["nvd"],"ingestedAt":"2026-10-13T15:33:40.085Z","slug":"CVE-2026-95124","body":"## Overview\n\nBuffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundled load_ini_buffer utility and strip_ini_cache()\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}