CVE-2026-107167: M17n-lib: heap use-after-free write in re_init_ic()
A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. This issue can cause applications relying on the library to crash, leading to a Denial of Service (DoS), or potentially allow arbitrary code execution.
Affected Software
Event History
Frequently Asked Questions
What must an attacker be able to do to trigger the issue?
An attacker needs to provide specially crafted text input to an application that uses m17n-lib. The input must cause an input-method state transition under the specific conditions that lead to reuse of a freed internal input context.
What is the practical impact for affected applications?
Affected applications can crash, causing a denial of service. The issue may also potentially permit arbitrary code execution, depending on the conditions in the affected application and runtime environment.
Is remote exploitation indicated by the available severity data?
No. The supplied vector lists local attack access (AV:L), so the available data characterizes exploitation as requiring local access rather than network access. It also indicates no privileges or user interaction are required once the attacker has the required local access.