CVE-2026-42371

概要

参考情報

• uriparser/uriparser#298 · Issue Tracking
• uriparser.github.io · Product
• openwall.com/lists/oss-security/2026/04/27/2 · Mailing List

uriparser のその他の脆弱性

• CVE-2026-44928中 5.3In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal.
• CVE-2026-44927中 5.3In uriparser before 1.0.2, there is pointer difference truncation to int in various places.
• CVE-2024-34403中 5.9An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a long string.
• CVE-2024-34402高 8.6An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long keys or values, with a…
• CVE-2021-46142中 5.5An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriNormalizeSyntax.