CVE-2026-107891: musl libc: multiple integer overflow in regcomp, possibly leading to incorrect allocation sizes and out-of-bounds heap writes
Summary
The regcomp function in musl libc is affected by multiple integer overflow issues that can lead to mis-sized allocations and out-of-bounds writes. The vulnerability affects versions 0.5.0 through 1.2.6, and patches to 1.2.7 or the attached patch are recommended; if patching is not possible, avoid processing regular expressions from untrusted sources.