https://seclists.org/oss-sec/2026/q1/352: Off-by-one heap buffer overflow in libuv
Published Mar 19, 2026
·Updated
Affected Software
1 affected component
libuv libuv>=1.47.0<=v1.x HEAD
Frequently Asked Questions
1
What is the severity of CVE-2026-12345?
The severity of CVE-2026-12345 is considered low due to the limited attack surface.
2
How do I fix CVE-2026-12345?
To fix CVE-2026-12345, update to the latest version of libuv where the vulnerability has been resolved.
3
What systems are affected by CVE-2026-12345?
CVE-2026-12345 affects applications that use the libuv library for TTY functionalities.
4
What is an off-by-one heap buffer overflow in CVE-2026-12345?
An off-by-one heap buffer overflow in CVE-2026-12345 occurs when a single byte is written beyond the allocated buffer in memory.
5
Is CVE-2026-12345 exploitable in production environments?
CVE-2026-12345 is unlikely to be exploitable in production environments due to its specific context in TTY code.