m17n-lib vulnerabilities
CVEs whose affected-version data names the m17n-lib package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
5 CVEsRSS
CVE-2026-109854Low· 2.5A flaw was found in m17n-lib
A flaw was found in m17n-lib. An attacker who supplies crafted input to an application processing ISO-2022 encoded text can cause the library to read uninitialized memory from the stack. If the application exposes or returns the decoded …
CVE-2026-107169Medium· 6.2A flaw was found in m17n-lib
A flaw was found in m17n-lib. An attacker could provide specially crafted or truncated UTF-8 input to trigger an unhandled null pointer dereference during text processing. This issue causes the application to crash unexpectedly, resultin…
CVE-2026-107167Medium· 6.2A flaw was found in m17n-lib
A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object …
CVE-2026-107170Low· 2.9A flaw was found in m17n-lib
A flaw was found in m17n-lib. A partial failure during library initialization can leave an internal driver pointer uninitialized. Under specific error conditions, such as system resource exhaustion or database corruption, an application …
CVE-2026-107168Medium· 6.2A flaw was found in m17n-lib
A flaw was found in m17n-lib. By providing crafted input containing an invalid UTF-8 character sequence, an attacker can cause the text parsing function to enter an infinite loop. This issue leads to sustained high CPU utilization, resul…