CVE-2026-95124: Buffer Overflow
Published Oct 13, 2026
·Updated
Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundled loadinibuffer utility and stripinicache()
Affected Software
1 affected component
madmurphy libconfini=1.16.4
Event History
Oct 13, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:17 PM
Description
Frequently Asked Questions
1
What component is affected by this issue?
The issue is in libconfini version 1.16.4, specifically an allocation-size mismatch involving its bundled load_ini_buffer utility and strip_ini_cache().
2
What can an attacker achieve by exploiting the flaw?
A remote attacker can trigger a buffer overflow that causes a denial of service.