inih vulnerabilities

CVEs whose affected-version data names the inih package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-71450Low· 3.3PoC

6d ago

inih before r63 Stack Buffer Under-Read in ini_parse_stream Discard Loop

inih before r63 contains a one-byte stack buffer under-read in ini_parse_stream() in ini.c that allows attackers to read abyss[-1] via an embedded NUL byte after an overlong line. Attackers can supply an INI file or string with a line of…

▾ Twilightbenhoyt · inihEPSS 0.13%via CVEORG